Thursday, 2009-04-02

[2009/04/02 00:04:49] @ Log started by gepetto
[2009/04/02 00:04:49] @ pietro joined channel #puppet
[2009/04/02 00:06:53] @ Quit: claymation:
[2009/04/02 00:11:12] @ teratoma left channel #puppet ()
[2009/04/02 00:25:11] @ m1n3s6 joined channel #puppet
[2009/04/02 01:04:41] @ ezmob joined channel #puppet
[2009/04/02 01:06:36] @ WALoeIII joined channel #puppet
[2009/04/02 01:08:35] @ arubdesu joined channel #puppet
[2009/04/02 01:13:00] @ Quit: arubdesu: "Leaving..."
[2009/04/02 01:14:02] @ Quit: Djelibeybi: "Leaving"
[2009/04/02 01:23:44] @ arubdesu joined channel #puppet
[2009/04/02 01:30:35] @ arubdesu is now known as arubdesu|away
[2009/04/02 01:41:56] @ Quit: kolla: Remote closed the connection
[2009/04/02 01:42:05] @ Quit: arubdesu|away: "Leaving..."
[2009/04/02 01:42:37] @ shake-n-bake joined channel #puppet
[2009/04/02 01:43:25] @ shake-n-bake_ joined channel #puppet
[2009/04/02 01:43:25] @ Quit: shake-n-bake: Read error: 104 (Connection reset by peer)
[2009/04/02 01:47:05] @ f3ew joined channel #puppet
[2009/04/02 01:49:17] @ Quit: f3ew: Client Quit
[2009/04/02 01:50:02] @ Quit: m1n3s6: Read error: 54 (Connection reset by peer)
[2009/04/02 01:57:06] @ Quit: ezmob: "Bye!"
[2009/04/02 02:06:23] @ pleemans joined channel #puppet
[2009/04/02 02:06:58] @ Deesl joined channel #puppet
[2009/04/02 02:09:35] @ mattock joined channel #puppet
[2009/04/02 02:16:29] @ f3ew joined channel #puppet
[2009/04/02 02:17:53] @ Quit: d3vilb0x:
[2009/04/02 02:29:29] @ maxagaz joined channel #puppet
[2009/04/02 02:35:42] @ Quit: alban3: Read error: 113 (No route to host)
[2009/04/02 02:36:47] @ axisys joined channel #puppet
[2009/04/02 02:41:16] @ gstratton joined channel #puppet
[2009/04/02 02:43:26] @ rraphink is now known as raphink
[2009/04/02 02:43:36] <gstratton> I'm having a little trouble with using the Nagios types in puppet. The files it creates are owned by root, which means that Nagios cannot read them
[2009/04/02 02:43:45] @ jizquierdo joined channel #puppet
[2009/04/02 02:44:02] <gstratton> I can't see why this would be the default
[2009/04/02 02:45:02] <gstratton> Am I doing something non-standard?
[2009/04/02 02:45:37] <FiXion> gstratton: I used this recipie and it works like a charm: http://reductivelabs.com/trac/puppet/wiki/Recipes/Nagios
[2009/04/02 02:49:43] @ Quit: shake-n-bake_:
[2009/04/02 02:50:34] <gstratton> FiXion: That recipe is for Nagios 2; I'm using Nagios 3 (on Lenny). I'm wondering whether that's the problem
[2009/04/02 02:51:25] @ shake-n-bake joined channel #puppet
[2009/04/02 02:55:47] @ Quit: WALoeIII: "Bai."
[2009/04/02 02:55:49] @ PsychoSid joined channel #puppet
[2009/04/02 02:56:57] <gstratton> Could someone else check who owns files created by exported Nagios resources?
[2009/04/02 02:59:23] <gstratton> Maybe the files should be owned by root, but not -rw-------
[2009/04/02 03:03:15] @ Innocenti joined channel #puppet
[2009/04/02 03:10:43] @ n0ts____________ joined channel #puppet
[2009/04/02 03:13:40] @ DerekW joined channel #puppet
[2009/04/02 03:17:22] @ mikepea joined channel #puppet
[2009/04/02 03:17:56] @ Quit: n0ts____________: "Tiarra 0.1+svn-30026: SIGTERM received; exit"
[2009/04/02 03:18:10] @ n0ts joined channel #puppet
[2009/04/02 03:20:50] @ Quit: n0ts___________: Read error: 110 (Connection timed out)
[2009/04/02 03:22:05] <FiXion> gstratton: we use nagios3 on the server and nagios-nrpe2 clients. works like a charm.
[2009/04/02 03:23:19] <gstratton> FiXion: What file permissions do files created by puppet have?
[2009/04/02 03:23:22] <FiXion> gstratton: nrpe's latest version is 2.12 - so you use v2 also.
[2009/04/02 03:23:29] <FiXion> I'll check - they work I can say that much :)
[2009/04/02 03:23:55] <gstratton> Are you using exported resources?
[2009/04/02 03:26:57] @ Quit: shake-n-bake:
[2009/04/02 03:35:11] <gstratton> FiXion: Got to go, thanks for your help. I've sent a mail to the list to see if anyone else has this issue
[2009/04/02 03:35:14] @ gstratton left channel #puppet ()
[2009/04/02 03:45:58] <FiXion> back - nrpe is owned by nagios
[2009/04/02 03:46:06] <FiXion> nrpe.cfg
[2009/04/02 03:56:58] @ madrescher joined channel #puppet
[2009/04/02 03:57:10] @ LagoniX joined channel #puppet
[2009/04/02 03:57:39] @ Quit: LagoniX: Client Quit
[2009/04/02 04:00:53] @ verwilst joined channel #puppet
[2009/04/02 04:02:29] @ briandquinn joined channel #puppet
[2009/04/02 04:05:38] @ Quit: mikepea:
[2009/04/02 04:06:45] @ MarlondB joined channel #puppet
[2009/04/02 04:11:31] @ kibahop joined channel #puppet
[2009/04/02 04:12:47] @ kibahop left channel #puppet ()
[2009/04/02 04:18:49] @ nasrat joined channel #puppet
[2009/04/02 04:21:20] @ Quit: pugnacity: Remote closed the connection
[2009/04/02 04:23:38] @ pugnacity joined channel #puppet
[2009/04/02 04:24:01] @ keithlard joined channel #puppet
[2009/04/02 04:25:22] @ alban3 joined channel #puppet
[2009/04/02 04:25:36] @ Quit: pugnacity: Remote closed the connection
[2009/04/02 04:25:59] @ pugnacity joined channel #puppet
[2009/04/02 04:26:41] @ Quit: mattock: "Leaving."
[2009/04/02 04:32:23] @ Quit: keithlard:
[2009/04/02 04:37:18] @ aymerick joined channel #puppet
[2009/04/02 04:40:33] @ stijnbe joined channel #puppet
[2009/04/02 04:45:16] @ WALoeIII joined channel #puppet
[2009/04/02 04:45:57] @ kibahop joined channel #puppet
[2009/04/02 04:46:17] @ kibahop left channel #puppet ()
[2009/04/02 04:50:27] @ nakano_ is now known as nakano
[2009/04/02 04:50:38] @ MattyM joined channel #puppet
[2009/04/02 04:51:45] @ nakano is now known as nakano_
[2009/04/02 05:00:16] @ kolla joined channel #puppet
[2009/04/02 05:04:52] @ glaw joined channel #puppet
[2009/04/02 05:07:55] @ mikepea joined channel #puppet
[2009/04/02 05:11:02] <JD> how do people deal with removing a server role from a server?
[2009/04/02 05:11:37] <JD> say you have a webserver and you need to turn it into a mail server, you'd want to make sure that the webserver bits aren't on there any more
[2009/04/02 05:12:04] <JD> obviously there's rebuilding the box
[2009/04/02 05:12:16] <JD> which is a bit of a sledgehammer approach
[2009/04/02 05:12:47] <kjetilho> it's hard. ideally you'd make a variable/parameter to all your modules which changes ensure -> absent etc.
[2009/04/02 05:13:07] <kjetilho> can't say we're there ourselves...
[2009/04/02 05:15:34] <FiXion> JD: I've chosen to simply install the packages that are needed for its role and NOT remove no-longer needed packages.
[2009/04/02 05:15:51] <FiXion> JD: the no longer needed packages (and services that should not be running) are then caught by nagios
[2009/04/02 05:16:14] <FiXion> I don't want to make a mistake and have puppet uninstall my packages :)
[2009/04/02 05:16:35] <FiXion> and I want nagios to catch if a server is running mysqld but is NOT in the group which sets up mysql monitoring etc.
[2009/04/02 05:17:49] @ tim|mb joined channel #puppet
[2009/04/02 05:18:42] <verwilst> puppet seems to be pretty limited when it comes to more complex templates
[2009/04/02 05:18:59] <verwilst> for example network config files with multiple vlans/aliases/...
[2009/04/02 05:19:16] <verwilst> since you can only specify arrays..
[2009/04/02 05:20:51] <jamesturnbull> verwilst: yes that's a limitation in some respects - I find can get ERB to do most of what I want
[2009/04/02 05:21:12] <verwilst> jamesturnbull: any idea what i could do to help with this?
[2009/04/02 05:21:21] <jamesturnbull> verwilst: would love a network configuration type and provider :P
[2009/04/02 05:21:43] <verwilst> the thing i tried first was sth like [{ 'a' => 'aaaaaaaaa', 'b' => 'vvvvv'}, ...]
[2009/04/02 05:21:50] <verwilst> which ofcourse does not work :(
[2009/04/02 05:21:55] <jamesturnbull> verwilst: but in the absence of that then Recipes and modules with good doco is always welcomed
[2009/04/02 05:22:43] <verwilst> and i guess multi-line variables do not work either?
[2009/04/02 05:23:22] <jamesturnbull> verwilst: well I'd use a template for that
[2009/04/02 05:23:47] <jamesturnbull> verwilst: with smaller variables - I don't know what I'd use a multi-line variable for - but YMMV
[2009/04/02 05:24:23] @ Quit: nasrat:
[2009/04/02 05:26:58] <verwilst> jamesturnbull: smaller variables?
[2009/04/02 05:27:07] <verwilst> one host could have like eth0.25
[2009/04/02 05:27:16] <verwilst> another one eth1.50, ...
[2009/04/02 05:28:36] @ Quit: madrescher: Read error: 110 (Connection timed out)
[2009/04/02 05:28:41] <jamesturnbull> verwilst: yeah - and they are available as facts
[2009/04/02 05:29:04] <verwilst> as facts?
[2009/04/02 05:29:09] @ ethan_rowe joined channel #puppet
[2009/04/02 05:29:12] <verwilst> well, the network info is in a database
[2009/04/02 05:29:21] <verwilst> i want to build the interfaces file from there
[2009/04/02 05:29:27] <verwilst> how would you do the facts?
[2009/04/02 05:29:53] <jamesturnbull> verwilst: then use external nodes
[2009/04/02 05:29:59] <kjetilho> wouldn't that only work, after the fact, so to speak?
[2009/04/02 05:30:07] <verwilst> jamesturnbull: i am :)
[2009/04/02 05:30:20] <verwilst> but i still need a way to get the network config to my template, no?
[2009/04/02 05:31:08] <jamesturnbull> verwilst: I am little lost ... the $interface_int facts will have the config on the local box, you can specify a variable for each node called $vlan or whatever in your external node
[2009/04/02 05:31:43] <tim|mb> jamesturnbull: i think verwilst wants to setup his interfaces from puppet, not do something with them after they've been set up?
[2009/04/02 05:31:56] <verwilst> tim|mb: correct
[2009/04/02 05:32:43] <verwilst> my hosts have a lot of aliases and multiple vlans mostly
[2009/04/02 05:33:02] <verwilst> so i can't just do like interface_eth0 = ""; and such :)
[2009/04/02 05:33:09] <jamesturnbull> I still don't see what's stopping you? $vlan variable in the external node - applied in a template to create a new interface?
[2009/04/02 05:33:35] <verwilst> jamesturnbull: that only works if you have 1 vlan, no?
[2009/04/02 05:33:59] <jamesturnbull> verwilst: $vlan1, $vlan2, $vlan3?
[2009/04/02 05:34:12] <tim|mb> or an array
[2009/04/02 05:34:41] <verwilst> can i get a specific value from an array with puppet?
[2009/04/02 05:34:43] <jamesturnbull> verwilst: and then use some ERB magic to manipulate the array or variables
[2009/04/02 05:34:54] <verwilst> like vlan_array[0], ...
[2009/04/02 05:35:00] <verwilst> and loop from 0 to x ?
[2009/04/02 05:35:03] <jamesturnbull> verwilst: http://reductivelabs.com/trac/puppet/wiki/PuppetTemplating
[2009/04/02 05:35:07] <jamesturnbull> verwilst: see the Iteration example
[2009/04/02 05:35:24] <verwilst> jamesturnbull: yeah i know about that
[2009/04/02 05:35:33] <verwilst> but you need more than a vlan id
[2009/04/02 05:35:41] <verwilst> ip, gateway, devicename, ...
[2009/04/02 05:36:01] <verwilst> which i can only do with arrays if i can iterate through numbers
[2009/04/02 05:36:13] <tim|mb> ah now i get it... you can't do nested arrays, that's indeed not always convenient
[2009/04/02 05:36:20] <verwilst> then i can do device[0], vlan[0], ...
[2009/04/02 05:36:26] <jamesturnbull> tim|mb: oh I see
[2009/04/02 05:37:01] <tim|mb> verwilst: that would work in erb, wouldn't it?
[2009/04/02 05:37:20] <verwilst> the examples in puppetTemplating don't help me, that's for sure :)
[2009/04/02 05:37:21] <jamesturnbull> no you can't do that in the DSL but nothing stopping you doing it in ERB I suspect
[2009/04/02 05:37:31] <verwilst> can i use any ERB syntax i guess?
[2009/04/02 05:37:36] * verwilst looks for ERB docs
[2009/04/02 05:37:40] <jamesturnbull> verwilst: well they are simple examples - feel free to add to them
[2009/04/02 05:37:50] <jamesturnbull> verwilst: you have access to the complete ERB syntax
[2009/04/02 05:38:40] <verwilst> if only i could pass a hash to the template..
[2009/04/02 05:40:36] <verwilst> hm, the erb docs seem pretty uh.. basic..
[2009/04/02 05:41:32] <verwilst> or can i use http://www.ruby-doc.org/core/classes/Array.html in ERB as well?
[2009/04/02 05:41:36] <verwilst> ( don't know ruby )
[2009/04/02 05:44:21] <verwilst> ok, [0] works
[2009/04/02 05:44:26] <verwilst> now to iterate.. :)
[2009/04/02 05:46:35] <jamesturnbull> verwilst: be great if you added your findings to the wiki - thanks
[2009/04/02 05:46:49] @ Quit: stijnbe: "Leaving..."
[2009/04/02 05:47:18] <verwilst> jamesturnbull: will do
[2009/04/02 05:47:45] <verwilst> maybe you know how to iterate over 0 to array.nitems? :)
[2009/04/02 05:49:03] <verwilst> for i in range(..):
[2009/04/02 05:50:32] <verwilst> Could not find value for 'range' at .... grr
[2009/04/02 05:50:33] <jamesturnbull> hmm something like <% 1.upto(5) do |i| %>
[2009/04/02 05:50:51] <jamesturnbull> and close the do with <% end %>
[2009/04/02 05:50:57] * verwilst tries
[2009/04/02 05:52:21] <verwilst> works!
[2009/04/02 05:52:34] <verwilst> <% 0.upto(interfaces.nitems-1) do |i| %>
[2009/04/02 05:53:05] <jamesturnbull> verwilst: yah :P
[2009/04/02 05:53:22] <verwilst> ok, so now i can make several arrays with the stuffs i need
[2009/04/02 05:53:35] <verwilst> and link em to eachother with the position :)
[2009/04/02 05:56:28] @ GoodStuff joined channel #puppet
[2009/04/02 05:56:39] @ Quit: GoodStuff: Client Quit
[2009/04/02 05:59:51] <idimmu> is it possible to do basic maths in an erb file
[2009/04/02 06:00:02] <idimmu> ?
[2009/04/02 06:01:21] <jamesturnbull> idimmu: yes but you can do it in the DSL too
[2009/04/02 06:01:31] <jamesturnbull> s/but/or/
[2009/04/02 06:02:03] <idimmu> i think itd be easier to do it in the template
[2009/04/02 06:02:09] <idimmu> well, less work
[2009/04/02 06:02:17] <jamesturnbull> idimmu: sure - just for reference - http://reductivelabs.com/trac/puppet/wiki/LanguageTutorial#variable-expressions
[2009/04/02 06:02:52] @ keithlard joined channel #puppet
[2009/04/02 06:03:34] <idimmu> sweet, but can i do something like <%= var * 5 %> ?
[2009/04/02 06:04:20] @ tim|macbook joined channel #puppet
[2009/04/02 06:05:57] @ londo__ is now known as londo
[2009/04/02 06:06:48] @ Quit: Shamgar: Remote closed the connection
[2009/04/02 06:08:06] <jamesturnbull> idimmu: sure
[2009/04/02 06:08:51] @ avleen left channel #puppet ()
[2009/04/02 06:11:09] <idimmu> ace
[2009/04/02 06:12:11] @ Shamgar joined channel #puppet
[2009/04/02 06:12:35] @ Quit: WALoeIII: "Bai."
[2009/04/02 06:15:19] @ Quit: tim|mb: Read error: 110 (Connection timed out)
[2009/04/02 06:15:45] @ Quit: ohadlevy: Remote closed the connection
[2009/04/02 06:16:42] <verwilst> what's the ruby way of doing the bash thingy VAR="${VAR}bleh" ? :)
[2009/04/02 06:17:45] <kjetilho> VAR += "bleh" ?
[2009/04/02 06:17:56] <verwilst> hm
[2009/04/02 06:17:58] * verwilst tries
[2009/04/02 06:18:33] * verwilst gives kjetilho a pat on the back
[2009/04/02 06:18:35] <verwilst> thanks :)
[2009/04/02 06:20:39] <verwilst> we're getting there
[2009/04/02 06:24:30] @ madrescher joined channel #puppet
[2009/04/02 06:31:53] <jenza> Yeah whoever created the redhat spec file failed :x
[2009/04/02 06:32:03] <jenza> useradd -r -u 52 -g puppet -d %{_localstatedir}/lib/puppet -s /sbin/nologin \
[2009/04/02 06:32:03] <jenza> useradd -r -g puppet -d %{_localstatedir}/lib/puppet -s /sbin/nologin \ -c "Puppet" puppet || :
[2009/04/02 06:33:35] <jenza> actually ignore that
[2009/04/02 06:34:02] <Volcane> its a bit hard to read
[2009/04/02 06:34:23] @ Quit: rmiller4pi8: Read error: 110 (Connection timed out)
[2009/04/02 06:38:59] <jenza> Yeah there's a typo in the redhat specfile. http://pastie.org/434732
[2009/04/02 06:39:34] <jenza> Someone replaced a line and didn't delete the old one
[2009/04/02 06:40:12] <Volcane> yeah, I've not yet installed new machines with 0.24.8 only upgraded old ones, this morning when i tried it it failed
[2009/04/02 06:40:15] <Volcane> saw the same then
[2009/04/02 06:40:31] <Volcane> send patch :)
[2009/04/02 06:41:30] <jenza> Haven't submitted any patches, don't know how :)
[2009/04/02 06:41:36] <jenza> I can log a bug report I guess.
[2009/04/02 06:41:53] <Volcane> yeah probably the easiest for non dev ppls
[2009/04/02 06:42:44] <jenza> Will do
[2009/04/02 06:43:35] @ nakano_ is now known as nakano
[2009/04/02 06:44:30] @ stijnbe joined channel #puppet
[2009/04/02 06:50:58] @ Quit: axisys: Read error: 110 (Connection timed out)
[2009/04/02 06:54:11] @ Quit: yure: Read error: 104 (Connection reset by peer)
[2009/04/02 06:54:17] @ nakano is now known as nakano_
[2009/04/02 06:55:29] @ nakano_ is now known as nakano
[2009/04/02 06:56:09] @ jbooth_ joined channel #puppet
[2009/04/02 07:07:37] @ nakano is now known as nakano_
[2009/04/02 07:08:07] @ Quit: jbooth: Read error: 110 (Connection timed out)
[2009/04/02 07:09:16] @ yarihm joined channel #puppet
[2009/04/02 07:14:39] <eythian> the 'purge' attrib in 'file' with recurse=>true will delete any files on the host not on the source, within the directory, right?
[2009/04/02 07:14:50] <f3ew> yes
[2009/04/02 07:15:46] <Volcane> eythian: but see http://reductivelabs.com/trac/puppet/wiki/FrequentlyAskedQuestions#i-want-to-manage-a-directory-and-purge-its-contents
[2009/04/02 07:16:40] <eythian> f3ew: ta, the docs aren't perfectly clear on that, and it's something I'd like to be sure of.
[2009/04/02 07:17:12] <eythian> Volcane: thanks, although it doesn't apply here (in that I'm not trying to empty anything - just keep it in close sync)
[2009/04/02 07:21:08] <Volcane> bah, why is it so hard just to pipe STDERR and not STDOUT to a command
[2009/04/02 07:21:08] <Volcane> lame
[2009/04/02 07:24:09] @ Quit: Deesl: Read error: 104 (Connection reset by peer)
[2009/04/02 07:25:56] @ jbooth joined channel #puppet
[2009/04/02 07:26:26] @ d3vilb0x joined channel #puppet
[2009/04/02 07:28:26] @ Quit: glaw: Remote closed the connection
[2009/04/02 07:29:37] <eythian> Volcane: swap them and then do a regular pipe
[2009/04/02 07:30:01] <Volcane> eythian: yes, that'd be hard and ugly to look at :P
[2009/04/02 07:30:31] <Volcane> command 2>&1 >&3 3>&- | grep word 3>&-
[2009/04/02 07:30:38] <Volcane> will work, but having 100s of those in crontab, ugly
[2009/04/02 07:30:42] <eythian> Volcane: yeah, but it'd work :) it's not a common use-case
[2009/04/02 07:31:01] * Volcane wants to send cron jobs STDERR to local0 and onto my loghost
[2009/04/02 07:31:31] <Volcane> syslog-ng cant yet do rewrites on facilities
[2009/04/02 07:31:41] <Volcane> cron is braindead and unconfigurable
[2009/04/02 07:31:45] <Volcane> etc, not fun
[2009/04/02 07:32:09] <eythian> err yeah. I just rely on it sending me emails when things go wrong.
[2009/04/02 07:32:33] <Volcane> unfortunately these developers prints GIGS of stuff to STDERR
[2009/04/02 07:33:25] <eythian> oh. bad developers then :(
[2009/04/02 07:36:28] @ ^authentic joined channel #puppet
[2009/04/02 07:37:39] @ Quit: jbooth_: Read error: 110 (Connection timed out)
[2009/04/02 07:49:11] @ gebi_ is now known as gebi
[2009/04/02 07:52:02] @ Quit: authentic: Read error: 110 (Connection timed out)
[2009/04/02 07:52:10] @ ^authentic is now known as authentic
[2009/04/02 07:53:11] @ Quit: d3vilb0x:
[2009/04/02 08:06:45] @ Quit: authentic: Read error: 60 (Operation timed out)
[2009/04/02 08:11:51] @ Quit: keithlard:
[2009/04/02 08:12:46] @ authentic joined channel #puppet
[2009/04/02 08:22:51] @ keithlard joined channel #puppet
[2009/04/02 08:28:22] @ nakano_ is now known as nakano
[2009/04/02 08:31:58] @ Quit: stijnbe: Remote closed the connection
[2009/04/02 08:52:50] @ nasrat joined channel #puppet
[2009/04/02 08:55:14] @ hexasoft joined channel #puppet
[2009/04/02 08:55:17] <hexasoft> hello
[2009/04/02 08:55:23] @ stijnbe joined channel #puppet
[2009/04/02 08:57:01] @ kambiz_away is now known as kambiz
[2009/04/02 08:58:19] <Volcane> lo hexasoft
[2009/04/02 08:58:25] <hexasoft> 'lo Volcane
[2009/04/02 08:58:47] <hexasoft> we are currently testing "smart" (http://labix.org/smart) on RHEL5 machines
[2009/04/02 08:59:23] <hexasoft> as packet manager. this one is not on the list of package manager on the documentation
[2009/04/02 08:59:45] <hexasoft> someone knows a plan to handle it?
[2009/04/02 09:00:10] <hexasoft> maybe I can write a puppet/facter for that, if not planed.
[2009/04/02 09:00:22] * tim|macbook has never heard of it
[2009/04/02 09:00:32] <Volcane> should be easyish to do based on one of the existing package providers
[2009/04/02 09:00:50] <hexasoft> Volcane: yes, it is very similar (in use) that yum
[2009/04/02 09:01:00] <hexasoft> than
[2009/04/02 09:01:13] <hexasoft> well, you understand me :)
[2009/04/02 09:01:32] <Volcane> but yeah, also never heard of it
[2009/04/02 09:01:37] <hexasoft> ok
[2009/04/02 09:02:02] @ Quit: madrescher: Read error: 110 (Connection timed out)
[2009/04/02 09:02:03] <hexasoft> we are tired of yum, so we try other package manager
[2009/04/02 09:02:14] * tim|macbook doesn't see the problem that's fixed by smart... but that might be me
[2009/04/02 09:02:22] <Volcane> whats te problem with yum?
[2009/04/02 09:02:30] <hexasoft> the first very visible is the speed :)
[2009/04/02 09:02:38] <Volcane> yum on 5.3 is much better
[2009/04/02 09:02:59] <hexasoft> Volcane: oh? most of our machines are RHEL4 at this time
[2009/04/02 09:03:12] <Volcane> yeah its much faster
[2009/04/02 09:03:17] @ jief- joined channel #puppet
[2009/04/02 09:03:18] <jief-> hello
[2009/04/02 09:03:20] <hexasoft> in fact the RHEL5 version correct many curious bugs
[2009/04/02 09:03:25] <Volcane> anyway, do you really install that much software manually by hand?
[2009/04/02 09:03:38] <hexasoft> not by hand, no
[2009/04/02 09:03:55] <huggie> Volcane: What version had the improvements OOI?
[2009/04/02 09:04:30] <hexasoft> Volcane: but yum failed to handle some complicated situations which implies to not use the most recent version of a package, for example
[2009/04/02 09:04:33] <Volcane> not sure when it came in, 5.3 is using yum 3.2.19 while 5.2 used 3.2.8
[2009/04/02 09:04:36] <hexasoft> (at least on RHEL4)
[2009/04/02 09:04:49] <Volcane> hexasoft: odd
[2009/04/02 09:05:06] @ Quit: MarlondB: Read error: 60 (Operation timed out)
[2009/04/02 09:05:07] <Volcane> 5.2 was already a big improvement though
[2009/04/02 09:05:17] <jief-> if i enabled storeconfigs to postgres for example, do i lose the ability to edit my config files on the filesystem?
[2009/04/02 09:05:37] <Volcane> like i dont think yum is the ost awesoe thing on the planet - god damn installing i386 and x86_64 all the time - but its bearable for sure :P
[2009/04/02 09:05:53] <jief-> or is it a copy sent to a DB ?
[2009/04/02 09:05:57] <hexasoft> btw I will re-test the problems we had in the past on my 5.3 test system.
[2009/04/02 09:06:04] <Volcane> jief-: i think you miss undertstand the purpose of storeconfigs
[2009/04/02 09:06:07] @ MarlondB joined channel #puppet
[2009/04/02 09:06:13] <jief-> Volcane: enlighten me ;)
[2009/04/02 09:06:16] <Volcane> hexasoft: would be interesting to hear
[2009/04/02 09:06:26] <Volcane> hexasoft: both details of the issue and if its solved
[2009/04/02 09:06:30] <hexasoft> I will report :)
[2009/04/02 09:07:00] <Volcane> jief-: erm, the config files tehmselves dont live in the db then manigically, it just stores the state of the servers in the db - what classes etc are on them - so you can build dynamic configs
[2009/04/02 09:07:10] <Volcane> jief: working with puppet manifests doesnt change at all
[2009/04/02 09:07:28] <Volcane> unless you actually use @@file{} style resources
[2009/04/02 09:07:45] <hexasoft> an example that is solved in RHEL5 versions: when installing libc++-devel both 64 and 32bit. yum always install on of them. first time the 64b, if you retry just the 32b, and so on.
[2009/04/02 09:08:00] <hexasoft> at it works fine with direct "rpm" command.
[2009/04/02 09:08:24] <Volcane> i hate how it installs both, its so infuriating
[2009/04/02 09:08:33] <jief-> Volcane: ah gotcha
[2009/04/02 09:08:46] <jief-> Volcane: we could use it to generate reports on hosts as well
[2009/04/02 09:08:51] <Volcane> yes
[2009/04/02 09:08:52] <hexasoft> Volcane: yes. but in our case on most machines we do need to install both, so...
[2009/04/02 09:09:13] <jief-> Volcane: and im assuming puppetshow requires storeconfigs?
[2009/04/02 09:09:24] <Volcane> donno about puppetshow
[2009/04/02 09:09:30] <hexasoft> (because many of our users are not able to write codes that compile on 64b machines...)
[2009/04/02 09:09:31] <Volcane> afaik it doesnt even work with current puppets :)
[2009/04/02 09:09:36] <Volcane> hexasoft: heh
[2009/04/02 09:09:45] <jief-> Volcane: do you use webguis with your puppet setup?
[2009/04/02 09:09:45] <hexasoft> (it a shame...)
[2009/04/02 09:10:14] <Volcane> jief: i wrote the puppetview thing, and i have a classifier I wrote but never really fully ended up using
[2009/04/02 09:10:24] <Volcane> no time, i want to though
[2009/04/02 09:10:40] <Volcane> should employ some bored coder/student, maybe find an intern
[2009/04/02 09:10:59] <jief-> ok
[2009/04/02 09:11:05] <jief-> lemme take a look at puppetview
[2009/04/02 09:11:23] <jief-> im looking for something we can show our CTO and senior IT director
[2009/04/02 09:11:32] <Volcane> heh, puppetview is fugly++
[2009/04/02 09:11:37] <Volcane> but its using templates
[2009/04/02 09:11:39] <Volcane> so u can make it pretty
[2009/04/02 09:11:42] @ walrus_ joined channel #puppet
[2009/04/02 09:11:43] @ walrus__ joined channel #puppet
[2009/04/02 09:11:53] <Volcane> it just views logs, facts, graphs
[2009/04/02 09:12:30] <jief-> we're not sure we what we gonna do about that yet
[2009/04/02 09:12:39] <jief-> we have our own in-house tool to manage our openvz park
[2009/04/02 09:12:46] <jief-> so we might just send graphs there instead
[2009/04/02 09:13:05] <Volcane> yeah, the puppetview thing on the wiki is just a simple use of my objects, i use the same in a larger app
[2009/04/02 09:14:10] <jief-> i still have to figure out how to use puppet on our network
[2009/04/02 09:14:19] <Volcane> ah
[2009/04/02 09:14:38] <jief-> we have 3 differents stages: dev, staging, prod
[2009/04/02 09:14:51] <jief-> not sure if we'll go with 3 environments, or just have stable/testing for example
[2009/04/02 09:14:59] <Volcane> i use environments for that
[2009/04/02 09:15:18] <Volcane> with a common directory of modules that goes to all environments
[2009/04/02 09:15:31] <Volcane> but if i need somehting env specific - like while developing on a module - i can put it in just that environment
[2009/04/02 09:15:35] <jief-> how do you promote a config in dev to prod for example?
[2009/04/02 09:15:45] <Volcane> branches
[2009/04/02 09:16:00] <jief-> you mean Git/SVN/CVS kinda branches?
[2009/04/02 09:16:07] <Volcane> and once its made it all the way through the process to prod, the branches all go away and it ends up in my common modules repo
[2009/04/02 09:16:08] <Volcane> yes
[2009/04/02 09:17:04] <jief-> not a bad idea, we could roll out tags for different sites we run
[2009/04/02 09:17:09] <jief-> and it would simplify our deployments
[2009/04/02 09:18:57] <Volcane> since hte manifests are just files, and they just live in paths
[2009/04/02 09:19:01] <Volcane> its easy to do whatever :)
[2009/04/02 09:19:08] <Volcane> and environments can have different module paths
[2009/04/02 09:19:20] <Volcane> modulepath = /path/to/production/modules:/path/to/common/modules
[2009/04/02 09:19:24] <jief-> you know, once in a while, you tumble on a tool and you go 'geez, what did i do without that?'
[2009/04/02 09:19:28] <jief-> puppet is such a tool for me
[2009/04/02 09:19:39] <Volcane> so generaly my stuff lives in common, cos they're all the same
[2009/04/02 09:19:45] <jief-> by giving different ones, its gonna search both paths?
[2009/04/02 09:20:02] <Volcane> but when working in dev, i just svn copy common/modules/apache development/modules/apache
[2009/04/02 09:20:07] <Volcane> and then the dev boxes gets the branch
[2009/04/02 09:20:24] <jief-> that's kinda how we see it used here too
[2009/04/02 09:22:19] <Volcane> simplistic, many people will want to do say apache module tag foo goes to dev and tag bar to prod etc
[2009/04/02 09:22:27] <Volcane> i am sure you can manage that, but i just dont need all that
[2009/04/02 09:22:44] <Volcane> 4 branches is fine for me, and i strive to mostly have everything in common, only branching when i am deving
[2009/04/02 09:23:38] <jief-> that's kinda our goal too
[2009/04/02 09:23:42] <jief-> one for prod, one to dick around
[2009/04/02 09:23:47] <Volcane> yup
[2009/04/02 09:23:51] <jief-> and since we have real juniors on our team
[2009/04/02 09:24:00] <jief-> we dont want them to bring down the whole shebang
[2009/04/02 09:24:15] <jief-> and puppet would make it simple do that hehe
[2009/04/02 09:24:17] <Volcane> one place i help at they have branches per developer and environments per dev
[2009/04/02 09:24:58] <jief-> im thinking modules for stuff like varnished, apache, memcached, mysql, etc
[2009/04/02 09:25:07] <jief-> and then other modules for products that include them
[2009/04/02 09:25:08] <Volcane> everything a module
[2009/04/02 09:25:14] <jief-> and possibly override some confs
[2009/04/02 09:25:20] <jief-> ya, i dont like the classes
[2009/04/02 09:25:21] <Volcane> fileserving, facts, plugins, everythiung out of modules
[2009/04/02 09:25:30] <jief-> you end up with all templates under /etc/puppet/templates
[2009/04/02 09:25:33] <jief-> and that's kinda messy
[2009/04/02 09:25:33] <ashp> hmm, groundworks isn't nearly as smart as I had hoped
[2009/04/02 09:25:41] <ashp> if you import your nagios configuration it's not smart enough to adjust paths or anything
[2009/04/02 09:25:53] <Volcane> ashp: GIGO :P
[2009/04/02 09:26:26] <ashp> well i figured it would be smart enough to realize that it needs to adjust my old nagios conf plugin path to its own internal copy of nagios
[2009/04/02 09:26:34] <ashp> but it seems like it literally just loads up your existing conf
[2009/04/02 09:28:26] @ d3vilb0x joined channel #puppet
[2009/04/02 09:28:47] @ Quit: fujin:
[2009/04/02 09:29:39] @ glaw joined channel #puppet
[2009/04/02 09:33:04] @ walrus_ is now known as walrus
[2009/04/02 09:35:08] <Telmo> morning
[2009/04/02 09:35:22] <Telmo> I have a puppet DSL question!
[2009/04/02 09:35:41] <glaw> morning telmo
[2009/04/02 09:36:07] <glaw> DSL= definitive software library?
[2009/04/02 09:36:09] <Telmo> I have a define sun_pkg($name){ source => /path/to/$name, ensure => installed }
[2009/04/02 09:36:19] <Volcane> domain specific language :)
[2009/04/02 09:36:23] <Telmo> how would I go about passing an array to that
[2009/04/02 09:36:25] <glaw> ah
[2009/04/02 09:36:38] <Volcane> sun_package{$array: ... }
[2009/04/02 09:36:40] <Telmo> so I can say sun_pkg[name1, name2, name3]
[2009/04/02 09:36:57] <Volcane> and you'd get 1 x sun_package{} for each array member
[2009/04/02 09:37:13] <Volcane> its like a loop, without all the foreach b/s :)
[2009/04/02 09:37:20] <Telmo> Volcane, little by little I am becoming your #1 fun
[2009/04/02 09:37:21] <gepetto> Telmo: Volcane: #1 is http://projects.reductivelabs.com/issues/show/1 "Puppet - Feature #1: Differentiate classes from definitions - ReductiveLabs.com"
[2009/04/02 09:37:32] <Volcane> nice :P
[2009/04/02 09:37:36] <Telmo> thanks bot :)
[2009/04/02 09:38:19] <Telmo> is there an example of something similar in the wiki?
[2009/04/02 09:39:01] <Volcane> no doubt somewhere in one of the recipes yes, its basically the only way to loop so its very common use
[2009/04/02 09:39:22] @ Quit: walrus__: "Leaving"
[2009/04/02 09:39:44] <Telmo> so, define sun_pkg($array){ source => /path/to/$name, ensure => installed }
[2009/04/02 09:39:45] <Telmo> ?
[2009/04/02 09:40:00] <Volcane> no, erm first you define it
[2009/04/02 09:40:13] <Volcane> define sun_package($source, $ensure) { < do stuff here> }
[2009/04/02 09:40:15] <Telmo> ok, let me see if I can find a similar recipe
[2009/04/02 09:40:16] <Volcane> once you have that
[2009/04/02 09:40:19] <Volcane> its just like file{} and others
[2009/04/02 09:40:36] <Volcane> $packages = ["apache", "zsh"]
[2009/04/02 09:40:52] <Volcane> sun_package{$packages: ensure => present}
[2009/04/02 09:41:01] <Telmo> ah, I see
[2009/04/02 09:41:05] <Telmo> awesome thanks!
[2009/04/02 09:41:07] <Volcane> actually in your case you wont have "source" in the define
[2009/04/02 09:41:12] <Volcane> obviously.
[2009/04/02 09:42:53] <Volcane> http://pastie.org/434867
[2009/04/02 09:43:11] <Volcane> or something like that, i dont know how package{} works on sun machines
[2009/04/02 09:43:35] <Telmo> thank you so very much, you have no clue how much time you just saved me :D
[2009/04/02 09:43:54] <Volcane> np :)
[2009/04/02 09:44:49] <Telmo> well, starting with Solaris 10 the pkgadd command takes an url as the source for the pkg. I am not sure if puppet has been updated to reflect that, I am trying to work around the limitations of sun pkgs
[2009/04/02 09:45:16] @ fujin joined channel #puppet
[2009/04/02 09:45:25] <Volcane> passing it a url would probably result in it retrieving it on each puppet run :(
[2009/04/02 09:45:42] <Volcane> if pkgadd doesnt have some sensible local cache
[2009/04/02 09:46:08] <Telmo> well pkgadd checks if the pkg had already been installed, so it shouldn't be a problem
[2009/04/02 09:46:15] <Volcane> ah
[2009/04/02 09:46:31] <Telmo> although I am wondering about the performance hit if let's say I am checking for 20 packages
[2009/04/02 09:48:56] @ mvn071 joined channel #puppet
[2009/04/02 09:56:19] @ zahna joined channel #puppet
[2009/04/02 09:57:49] <zahna> for those of you who have a bunch of single machines running individual services (i have 4 or 5 seperate mysql machines), how do you typically structure the config? do you make a seperate class per machine? or one class that handles the different machines? or something else entirely?
[2009/04/02 09:58:32] <zahna> which way do you guys find to be more maintainable?
[2009/04/02 09:59:21] <Volcane> lots of modules for each type of thing
[2009/04/02 09:59:32] <Volcane> and just include them in the nodes, so they're kind of generic building blocks
[2009/04/02 09:59:54] <Volcane> and as patterns emerge, machines with things in common, create roles to encapsulate the patterns and apply them to groups of machines
[2009/04/02 10:00:13] <Volcane> roles being maybe just apache::fooservers
[2009/04/02 10:00:18] <Volcane> or role::fooservers
[2009/04/02 10:00:22] <Volcane> that includes various classes
[2009/04/02 10:01:12] <zahna> oh, so you do all modules?
[2009/04/02 10:01:18] <Volcane> all modules yes
[2009/04/02 10:01:55] <Volcane> works best with multiple environments etc, and i just like that a module is a little self contained entity with all its files, scripts, manifests, etc all in one place
[2009/04/02 10:02:03] <Volcane> easily tarred up, shared, documented
[2009/04/02 10:02:05] <zahna> re: roles, i have multiple single machines
[2009/04/02 10:02:21] <zahna> yeah, i should probably modularize
[2009/04/02 10:02:23] <Volcane> and most importantly easy to evaluate a module and see for yourself what impact code change will have
[2009/04/02 10:03:05] <zahna> i started with stuff in /etc/puppet and /var/lib/puppet and things have been fine so far, so i haven't had a big reason to change yet
[2009/04/02 10:03:51] <zahna> so in my case, with 4 different my.cnf's for my seperate mysql servers, how would you structure that?
[2009/04/02 10:04:01] <Volcane> mysql::config class
[2009/04/02 10:04:07] <Volcane> or subclass or whatever
[2009/04/02 10:04:14] <zahna> oh, interesting
[2009/04/02 10:04:38] <Volcane> and it just does a file{"/etc/my.cnf": source => ["puppet:///mysql/my.cnf.${fqdn}", "puppet:///mysql/my.cnf"]}
[2009/04/02 10:04:40] <zahna> so mysql itself and it's config would be seperate classes?
[2009/04/02 10:04:50] <Volcane> so then you create, modules/mysql/files/my.cnf.your.box.com
[2009/04/02 10:05:03] <Volcane> and on your.box.com 'include mysql::config
[2009/04/02 10:05:34] <Volcane> going further you can say, well here's a mysql box, gotta have config right? so just do a mysql module that includes mysql::config
[2009/04/02 10:05:49] <Volcane> and includes mysql::monitoring to set it up ready for nagios to monitor your mysql perhaps using nrpe
[2009/04/02 10:05:57] <Volcane> then you just do 'include mysql' and it all happens
[2009/04/02 10:06:30] <zahna> ok, so you have the class figure out which my.cnf to serve up, rather than having seperate classes for seperate hosts
[2009/04/02 10:06:34] <Volcane> and if you dont create a specific modules/mysql/files/my.cnf.your.box.com it will revert to your one-size-fits-all config in modules/mysql/files/my.cnf
[2009/04/02 10:07:17] <zahna> ok, that's basically how i've been configuring things, but wanted another person's view to check against my own
[2009/04/02 10:07:32] <zahna> i'm just not using modules yet
[2009/04/02 10:07:43] <Volcane> yeah thats about it, i have a define that wraps file{} so i dont have to type source => ["puppet:///mysql/my.cnf.${fqdn}", "puppet:///mysql/my.cnf"]
[2009/04/02 10:07:45] <Volcane> all the time
[2009/04/02 10:08:14] <Volcane> it will construct the search order for me in a std way, search for fqdn, then domain, then country, then default or whatever
[2009/04/02 10:08:48] <zahna> ok, i guess i am doing it a bit differently. i have a conditional in the mysql class that selects the File[] based on hostname
[2009/04/02 10:09:08] @ cwebber joined channel #puppet
[2009/04/02 10:09:14] <Volcane> ah, no file{} has that functionally built in with the array thing
[2009/04/02 10:09:16] <Volcane> saves on typing
[2009/04/02 10:09:32] <zahna> i should try that
[2009/04/02 10:14:33] <zahna> so, including a class automatically includes the subclasses, right?
[2009/04/02 10:14:37] <Volcane> no
[2009/04/02 10:14:42] <zahna> oh
[2009/04/02 10:15:01] <Volcane> 'include mysql' will load what is in modules/mysql/manifests/init.pp
[2009/04/02 10:15:07] <Volcane> a class called 'mysql'
[2009/04/02 10:15:14] <Volcane> you should then include in that what u want
[2009/04/02 10:15:23] <Volcane> cos often, you have like bind::master bind::slave etc
[2009/04/02 10:15:39] <Volcane> you wouldnt want it to automagically include all sub stuff, you'll end up with a master+slave conbo bind box
[2009/04/02 10:15:39] <zahna> in my current setup, i just have a class mysql-server
[2009/04/02 10:15:46] @ lak joined channel #puppet
[2009/04/02 10:16:08] <zahna> oh, i did classes then other classes which included parent classes
[2009/04/02 10:16:17] <Volcane> its about the same with modules
[2009/04/02 10:16:27] <Volcane> at first glance they are just classes with classes
[2009/04/02 10:16:31] <zahna> er, inherited from parent classes, so in my setup, things happen automatically
[2009/04/02 10:16:37] <Volcane> ah
[2009/04/02 10:17:10] <zahna> so if i put a config class in my mysql-server class, the mysql-server::config class won't automatically be included in a node then, eh?
[2009/04/02 10:17:26] <Volcane> not unless mysql-server class includes it
[2009/04/02 10:17:29] @ Quit: cwebber:
[2009/04/02 10:17:56] <zahna> i didn't know it could do that
[2009/04/02 10:18:06] <zahna> a class can have an include statement?
[2009/04/02 10:18:11] <zahna> i that that was only for nodes
[2009/04/02 10:18:25] @ Quit: aZaFred:
[2009/04/02 10:18:26] <Volcane> yes, inheritance should only really be used if you really need to override things
[2009/04/02 10:18:29] <Volcane> else just include them
[2009/04/02 10:18:31] @ d3vilb0x_ joined channel #puppet
[2009/04/02 10:19:00] <zahna> oh, good tip
[2009/04/02 10:19:11] <zahna> i have a lot of refactoring to do then
[2009/04/02 10:19:33] <Volcane> i dont know but i guess routinely inheriting like mad probably makes the master work a lot harder at compiling too
[2009/04/02 10:19:45] <Volcane> but i find inheriting makes things hard to read
[2009/04/02 10:19:52] <Volcane> you look at a class that inherits from another
[2009/04/02 10:19:54] <PsychoSid> Hello anyone know what would cause a "Failed to match rpm output'' " error would mean ? The RPM goes on OK via YUM - this is on RHEL5 the module works OK on RHEL4 ?
[2009/04/02 10:19:59] <Volcane> its easy to see what will impact that class
[2009/04/02 10:20:13] <Volcane> but if you edit a class, how do you know what is inheriting from it and what will you break as a result
[2009/04/02 10:20:50] <Telmo> inheritance is the work of the devil!
[2009/04/02 10:21:33] <zahna> well, typically, how i've been doing it is the package is in the parent class, then the configs are in child classes which inherit from the parent class
[2009/04/02 10:21:37] <Telmo> useful at times, but once you get too deep into it all short of things break
[2009/04/02 10:21:53] <Volcane> yeh
[2009/04/02 10:22:06] <Volcane> i make mysql::install, mysql::config, mysql::monitor and mysql::
[2009/04/02 10:22:16] <Volcane> mysql::config resources require Class["mysql::install"] etc
[2009/04/02 10:22:36] <Volcane> so usually, a simple 'include mysql' does all i need and in the right order
[2009/04/02 10:23:10] <zahna> very interesting
[2009/04/02 10:23:38] <Volcane> and if i need a special type of something, like a replication mysql that requires other stuff for instance
[2009/04/02 10:23:42] <Volcane> I'd have mysql::slave
[2009/04/02 10:23:55] <Volcane> and it would include other bits, perhaps these other bits would inherit from mysql::config
[2009/04/02 10:24:00] <Volcane> but only inherit when needed
[2009/04/02 10:24:06] <zahna> so what would the "mysql" class include?
[2009/04/02 10:24:11] @ rmiller4pi8 joined channel #puppet
[2009/04/02 10:24:29] <Volcane> things i want in a default one-size-fits-all mysql box, ie. mysql::install, mysql::config, mysql::monitor
[2009/04/02 10:24:56] <Volcane> and mysql::config would use the file{} array thing to enable me to send out a box specific my.cnf
[2009/04/02 10:25:13] <zahna> ah
[2009/04/02 10:25:22] @ unxfrek joined channel #puppet
[2009/04/02 10:25:35] <zahna> so for a slave, would you only include mysql::slave?
[2009/04/02 10:25:52] <zahna> or "mysql, mysql::slave"
[2009/04/02 10:25:52] <Volcane> doing this means you can later to something - like say monitoring - that requires the install to be done, now if installing mysql requires 5 resources, you will go insane listing them all in require lines
[2009/04/02 10:25:52] <Volcane> but using a std class naming scheme like that, i know i can just require Class["mysql::install"]
[2009/04/02 10:26:02] <Volcane> just mysql::slave
[2009/04/02 10:26:44] <Volcane> cos ofcourse you can include the same thing 10 times
[2009/04/02 10:26:50] <Volcane> so if mysql::slave is just mysql+ something small
[2009/04/02 10:27:01] <Volcane> then mysql::slave would have 'include mysql' and whatever the small thing is
[2009/04/02 10:27:26] <jief-> Volcane: do you manage your puppetmasterd with itself?
[2009/04/02 10:27:41] <Volcane> jief: its just files isnt it? so yeah.
[2009/04/02 10:27:55] <zahna> oh, i'm liking your way. i was starting to run into ordering problems
[2009/04/02 10:28:20] <Volcane> zahna: its breaks a bit with virtual resources, but i have fait in lak fixing that :P
[2009/04/02 10:28:52] <zahna> in the next version?
[2009/04/02 10:29:10] <Volcane> donno, I've a ticket open
[2009/04/02 10:29:37] <zahna> gotcha
[2009/04/02 10:33:14] @ n0ts_ joined channel #puppet
[2009/04/02 10:34:21] @ Quit: d3vilb0x: Read error: 110 (Connection timed out)
[2009/04/02 10:34:59] <Telmo> anyone knows if puppet is able to deal with solaris patches? I haven't seen it documented anywhere
[2009/04/02 10:35:18] <Telmo> and I'd rather avoid writing it myself :)
[2009/04/02 10:35:49] @ Quit: stijnbe: "Leaving..."
[2009/04/02 10:36:17] <Volcane> they're not delivered as packages?
[2009/04/02 10:36:30] * Volcane 's been surpressing his memories of solaris
[2009/04/02 10:36:34] <Telmo> no, they are different, managed by different provider
[2009/04/02 10:36:45] <Telmo> pkgadd for pkg, patchadd for patches
[2009/04/02 10:37:12] <Volcane> great :P
[2009/04/02 10:37:35] <Telmo> ok,.. so I'll have to write it myself and submit it.. oh well
[2009/04/02 10:37:53] <Volcane> lots can be done with defines and execs :P
[2009/04/02 10:39:23] @ joe-mac joined channel #puppet
[2009/04/02 10:43:28] @ Quit: n0ts: Read error: 110 (Connection timed out)
[2009/04/02 10:44:19] @ shake-n-bake_ joined channel #puppet
[2009/04/02 10:44:19] <Telmo> nah, this needs to be one of the providers since it follows similar functionality to pkgadd
[2009/04/02 10:44:29] <kjetilho> Telmo: just run pca, why don't you?
[2009/04/02 10:44:46] <Telmo> not only that, but where pkgadd doesn't have dependencies patchadd doe
[2009/04/02 10:44:47] <Telmo> pca?
[2009/04/02 10:45:30] <Telmo> what is pca?
[2009/04/02 10:46:32] <kjetilho> Telmo: google it :)
[2009/04/02 10:47:26] <Telmo> oic
[2009/04/02 10:49:14] <Telmo> thanks for the info
[2009/04/02 10:49:19] <Telmo> looking into it now
[2009/04/02 10:51:09] @ bajan joined channel #puppet
[2009/04/02 10:52:21] @ Quit: alban3: Read error: 110 (Connection timed out)
[2009/04/02 10:58:07] @ Quit: sunoano: "Leaving."
[2009/04/02 10:58:58] <Volcane> heh yeah pca looks like the business
[2009/04/02 10:59:03] @ martha joined channel #puppet
[2009/04/02 11:01:13] <kjetilho> written by sysadmins, for sysadmins.
[2009/04/02 11:01:25] <verwilst> my external_nodes script outputs parameters like this:
[2009/04/02 11:01:36] <verwilst> myparam: [ 'bleh', 'blah' ]
[2009/04/02 11:01:38] @ Quit: markl__: "Lost terminal"
[2009/04/02 11:01:40] <verwilst> why doesnt that work?
[2009/04/02 11:01:42] @ bajan left channel #puppet ()
[2009/04/02 11:01:45] <verwilst> without the quotes works
[2009/04/02 11:01:50] <verwilst> but then it sees it as numeric
[2009/04/02 11:04:00] <verwilst> any ideas?
[2009/04/02 11:04:02] @ Quit: shake-n-bake_: Read error: 110 (Connection timed out)
[2009/04/02 11:04:19] @ Quit: fujin:
[2009/04/02 11:05:40] @ shake-n-bake_ joined channel #puppet
[2009/04/02 11:07:07] <Volcane> verwilst: thats not valid yaml.
[2009/04/02 11:07:29] <Volcane> i dont know what would be correct for yaml in nodes, but http://pastie.org/434947
[2009/04/02 11:07:47] <verwilst> Volcane: it was only a part of the yaml :)
[2009/04/02 11:07:56] <jenza> Anyone use an IDE that supports puppet syntax highlighting that's not vim/aliases :P
[2009/04/02 11:08:13] <Volcane> jenza: textmate
[2009/04/02 11:08:23] <jenza> oh yeah
[2009/04/02 11:08:35] <jenza> Wait
[2009/04/02 11:08:42] <jenza> (That also runs on Linux)
[2009/04/02 11:08:58] <kjetilho> jenza: Emacs of course
[2009/04/02 11:09:08] <Volcane> *snigger*
[2009/04/02 11:09:14] @ sunoano joined channel #puppet
[2009/04/02 11:09:29] @ Quit: nasrat:
[2009/04/02 11:10:50] @ Quit: kolla: Remote closed the connection
[2009/04/02 11:13:30] <jenza> yeah I don't think so
[2009/04/02 11:16:16] @ shake-n-bake joined channel #puppet
[2009/04/02 11:16:31] @ Quit: tim|macbook:
[2009/04/02 11:18:54] @ Quit: pleemans: Read error: 110 (Connection timed out)
[2009/04/02 11:20:19] @ hexasoft left channel #puppet ()
[2009/04/02 11:22:30] @ Quit: verwilst: "Ex-Chat"
[2009/04/02 11:22:38] @ masterzen joined channel #puppet
[2009/04/02 11:24:11] @ Quit: shake-n-bake_: Read error: 110 (Connection timed out)
[2009/04/02 11:26:53] @ shake-n-bake_ joined channel #puppet
[2009/04/02 11:26:56] @ Quit: PsychoSid: "Leaving."
[2009/04/02 11:30:23] @ Quit: jief-: "Lost terminal"
[2009/04/02 11:32:56] @ Quit: unxfrek: "Leaving"
[2009/04/02 11:34:12] @ Quit: shake-n-bake: Read error: 110 (Connection timed out)
[2009/04/02 11:36:19] @ benblack joined channel #puppet
[2009/04/02 12:05:28] @ Quit: aymerick:
[2009/04/02 12:09:45] @ mconigliaro left channel #puppet ()
[2009/04/02 12:09:59] @ Quit: benblack: "Leaving..."
[2009/04/02 12:10:27] @ alfism joined channel #puppet
[2009/04/02 12:12:22] @ cwebber joined channel #puppet
[2009/04/02 12:12:23] @ Quit: Innocenti: Read error: 113 (No route to host)
[2009/04/02 12:17:56] @ Quit: masterzen: "Leaving"
[2009/04/02 12:30:22] @ benblack joined channel #puppet
[2009/04/02 12:45:34] @ Quit: shake-n-bake_: Read error: 110 (Connection timed out)
[2009/04/02 12:46:07] @ jsm joined channel #puppet
[2009/04/02 12:47:53] @ kibahop joined channel #puppet
[2009/04/02 12:48:25] @ Quit: briandquinn:
[2009/04/02 12:49:14] @ kibahop left channel #puppet ()
[2009/04/02 12:50:48] @ Quit: cwebber:
[2009/04/02 12:52:59] @ shake-n-bake_ joined channel #puppet
[2009/04/02 12:53:59] @ WALoeIII joined channel #puppet
[2009/04/02 12:54:29] <WALoeIII> Any idea why I would have a file that has its permissions endlessly changed by puppet?
[2009/04/02 12:54:41] <WALoeIII> Wed Apr 01 15:14:56 -0700 2009 //Node[default]/load-balancer/nginx::lb/File[/data/onehub/current/public/images/logo_onehub_rev139x36.png]/mode (notice): mode changed '664' to '644'
[2009/04/02 12:55:10] <WALoeIII> EVERY catalog run, this happens on this instance. I have no idea where to even start, its set to 644, what changes it back to 664 a umask?
[2009/04/02 12:56:06] <Volcane> if you visually confirm the mode before puppet runs, whats it set to?
[2009/04/02 12:58:46] <WALoeIII> 664
[2009/04/02 12:58:57] <Volcane> and right after running?
[2009/04/02 12:59:05] <WALoeIII> let me force it to be sure
[2009/04/02 13:01:10] @ Quit: DerekW: Remote closed the connection
[2009/04/02 13:03:36] @ shake-n-bake joined channel #puppet
[2009/04/02 13:04:24] @ Quit: alfism: "Connection reset by beer"
[2009/04/02 13:04:28] <WALoeIII> Volcane: its an odd combination of things thanks for making me look at it the right way, its because when sourced from puppet it comes down as 644 but when deployed with Git its 664 in that repository. So this is on our staging server which we deploy to a lot hence the problem.
[2009/04/02 13:04:42] <Volcane> ah
[2009/04/02 13:05:03] <Volcane> kewl, no worries :)
[2009/04/02 13:05:35] @ jief- joined channel #puppet
[2009/04/02 13:06:30] @ alban3 joined channel #puppet
[2009/04/02 13:06:39] <jief-> if i want to override environment for instance, i would do '$environment = something' right?
[2009/04/02 13:07:05] <Volcane> cant change variables once set
[2009/04/02 13:07:13] <jief-> ah
[2009/04/02 13:07:21] <jief-> that probably explains why i can't override it then
[2009/04/02 13:07:53] <Volcane> only way to change environment is with a fact or by setting it on the clients config
[2009/04/02 13:08:15] <jief-> trying to configure it based on its hostname actually
[2009/04/02 13:08:19] @ Quit: d3vilb0x_: Remote closed the connection
[2009/04/02 13:08:24] <jief-> in a template
[2009/04/02 13:08:31] @ d3vilb0x joined channel #puppet
[2009/04/02 13:08:39] <Volcane> oh, you probably dont want to use $environment its special
[2009/04/02 13:09:28] <jief-> so you can't put that in a node definition?
[2009/04/02 13:09:33] <jief-> it has to be in puppet.conf ?
[2009/04/02 13:09:54] <Volcane> because it relates to this: http://reductivelabs.com/trac/puppet/wiki/UsingMultipleEnvironments
[2009/04/02 13:10:59] <jief-> wanted to do a if $ctx == prod { $environment = "stable" } kinda thing
[2009/04/02 13:11:05] @ Quit: shake-n-bake_: Read error: 110 (Connection timed out)
[2009/04/02 13:11:05] <jief-> in my basenode definition
[2009/04/02 13:11:20] <Volcane> to change the actual environment as in that wiki page
[2009/04/02 13:11:26] <Volcane> or just for your own use in a manifest?
[2009/04/02 13:11:34] <jief-> to change its environment
[2009/04/02 13:11:43] <jief-> to actually set in in my puppet.conf.erb
[2009/04/02 13:11:50] <Volcane> environment needs to be known at compile time, the client sends the environment it is in the to the master
[2009/04/02 13:12:08] <jief-> it would be set during the initial configuration
[2009/04/02 13:12:09] <Volcane> only way i found to programatically change it is with a custom fact on the server
[2009/04/02 13:12:33] <Volcane> jief: right so you just want something where u can store "stable" to then build the config?
[2009/04/02 13:12:40] <jief-> ya
[2009/04/02 13:12:42] <jief-> server-side
[2009/04/02 13:12:47] <Volcane> so use $foo or $env or $whatever
[2009/04/02 13:12:51] <Volcane> just not $environment
[2009/04/02 13:13:07] <jief-> and then <%= env %> in my template?
[2009/04/02 13:13:09] <Volcane> yes
[2009/04/02 13:13:20] <Volcane> if i am understanding u right
[2009/04/02 13:13:23] <jief-> that was going my backup way of doing it
[2009/04/02 13:13:50] <MrHeavy> I'm trying to create a custom function
[2009/04/02 13:14:00] <MrHeavy> I stuck it in /var/lib/puppet/lib/parser/functions
[2009/04/02 13:14:03] <MrHeavy> It is not being picked up
[2009/04/02 13:14:12] @ shake-n-bake_ joined channel #puppet
[2009/04/02 13:14:23] <MrHeavy> ...wait a sec, I think my reading is broken
[2009/04/02 13:15:03] <MrHeavy> Thank you for being my little stuffed duck, IRC,
[2009/04/02 13:15:06] <Volcane> libdir for me is /usr/lib/ruby/site_ruby/1.8/puppet/parser/functions/
[2009/04/02 13:16:08] <WALoeIII> Volcane: The file is 644 in my git repository actually which is why I set the permissions to that on the puppet config, but its because capistrano changes files to 664 on deploys, kind of subtle.
[2009/04/02 13:16:15] <MrHeavy> /var/lib/puppet/lib/PUPPET/parser/functions
[2009/04/02 13:16:20] <MrHeavy> :(
[2009/04/02 13:16:38] * Volcane wont ask how that came to be, the libdir :P
[2009/04/02 13:17:00] <jief-> Volcane: hmm, i did create a new variable
[2009/04/02 13:17:15] <jief-> but when i call it with <%= cfg_env %> in my .erb
[2009/04/02 13:17:19] <jief-> puppetd can't find it
[2009/04/02 13:17:30] <Volcane> where do you set cfg_env ?
[2009/04/02 13:17:57] <jief-> server-side, its defined in my basenode node
[2009/04/02 13:18:19] <Volcane> so node foo inherits basenode? with basenode having cfg_env = "foo" ?
[2009/04/02 13:18:24] <jief-> ya
[2009/04/02 13:18:37] <jief-> well, it has $cfg_env = "foo"
[2009/04/02 13:18:42] <jief-> lemme pastebin it
[2009/04/02 13:18:45] <Volcane> yes pls
[2009/04/02 13:19:35] @ sigmonsays_ joined channel #puppet
[2009/04/02 13:19:44] <jief-> http://pastebin.ca/1380127
[2009/04/02 13:19:54] <MrHeavy> Question that probably violates every notion of "separation of concerns" in the book
[2009/04/02 13:20:15] <MrHeavy> In my custom function, is there any way for me to get at the name of the class it was called from
[2009/04/02 13:20:23] <MrHeavy> (This is an error message/logging-type function)
[2009/04/02 13:20:32] @ cwebber joined channel #puppet
[2009/04/02 13:20:47] @ Quit: shake-n-bake: Read error: 110 (Connection timed out)
[2009/04/02 13:22:11] <Volcane> jief: move the if block above the includes
[2009/04/02 13:22:44] <Volcane> MrHeavy: afaik in newer puppet versions the variable 'name' is set to class name
[2009/04/02 13:23:12] <jief-> Volcane: you're good ;) didn't know the order mattered
[2009/04/02 13:23:22] <MrHeavy> Thanks Volcane, will try that
[2009/04/02 13:23:41] <Volcane> order mostly doesn't, but variables should to be set before using them
[2009/04/02 13:23:47] <jief-> kk
[2009/04/02 13:24:38] @ Quit: glaw: "goodbye cruel work"
[2009/04/02 13:24:49] @ shake-n-bake joined channel #puppet
[2009/04/02 13:25:40] <jief-> ah i see what you mean, i have to define cfg_env before including puppet::client
[2009/04/02 13:27:02] <jief-> <-- is trying to stop drinking coffee. not so great so far hehe
[2009/04/02 13:27:09] <Volcane> heh
[2009/04/02 13:30:05] <joe-mac> netfilter ruined my morning
[2009/04/02 13:30:15] @ Quit: f3ew: "You can /quit any time you like, but you can never leave"
[2009/04/02 13:31:15] @ Quit: shake-n-bake_: Read error: 110 (Connection timed out)
[2009/04/02 13:33:19] @ Quit: sigmonsays: Read error: 110 (Connection timed out)
[2009/04/02 13:35:29] @ Quit: MarlondB:
[2009/04/02 13:37:06] <jrojas> rawr....more coffeee is needed.
[2009/04/02 13:37:08] <jief-> some nodes will make puppetmasterd really slow
[2009/04/02 13:37:22] <joe-mac> i've had four espressos
[2009/04/02 13:37:40] <joe-mac> i have reflux disease so i'm already feeling the burn
[2009/04/02 13:39:12] <jief-> Volcane: im pretty sure of the answer, but is there a way to manage different lines in a given file in 2 seperate modules?
[2009/04/02 13:39:38] <Volcane> I use something to concatenate snippets to make the final file
[2009/04/02 13:39:41] @ sigmonsays joined channel #puppet
[2009/04/02 13:39:43] @ ezmob joined channel #puppet
[2009/04/02 13:40:12] <Volcane> so different modules can put snippets in and when they're all done the file gets rebuit
[2009/04/02 13:40:18] <jief-> cause we use a file named global.conf, which we use to set a host's context for example
[2009/04/02 13:40:23] <jief-> but we'd like to add more to it
[2009/04/02 13:40:29] <jief-> but with differents modules
[2009/04/02 13:41:02] <Volcane> http://nephilim.ml.org/~rip/puppet/concatfile/sample.pp
[2009/04/02 13:41:04] <Volcane> i do something like that
[2009/04/02 13:41:13] <Volcane> sets up /etc/named.conf to be built up by snippets
[2009/04/02 13:41:22] <Volcane> then put snippets down, and it will automagically build the resultig file
[2009/04/02 13:42:49] @ Quit: shake-n-bake: Read error: 110 (Connection timed out)
[2009/04/02 13:43:09] @ Quit: mikepea: Read error: 110 (Connection timed out)
[2009/04/02 13:45:43] <jief-> hmm puppet's performance just went down the drain
[2009/04/02 13:46:10] @ shake-n-bake joined channel #puppet
[2009/04/02 13:46:32] <Volcane> usually due to recursive copies or stored procs
[2009/04/02 13:46:40] @ Quit: benblack: "Leaving..."
[2009/04/02 13:47:14] <jief-> its timing out calling fileserver.list
[2009/04/02 13:48:01] @ Quit: sigmonsays_: Read error: 110 (Connection timed out)
[2009/04/02 13:49:14] @ stijnbe joined channel #puppet
[2009/04/02 13:51:00] @ sigmonsays_ joined channel #puppet
[2009/04/02 13:51:51] <jrojas> jief-: are you serving a large amount of files?
[2009/04/02 13:52:08] <jief-> jrojas: no
[2009/04/02 13:52:23] <jrojas> jief-: how many clients? puppetmaster? mongrel? passenger?
[2009/04/02 13:52:30] <jief-> 3 clients for now
[2009/04/02 13:52:33] <jief-> 1 puppetmaster
[2009/04/02 13:52:41] <jief-> and its using whatever is the default on 0.24.8
[2009/04/02 13:52:52] <jrojas> jief-: unless the server is busy with other things there shouldnt be a performance hit
[2009/04/02 13:53:04] <jrojas> jief-: what does iostat -x 1 show? any really busy disks?
[2009/04/02 13:53:06] <jief-> jrojas: terrible hit, everything is timing out
[2009/04/02 13:53:11] <jief-> jrojas: no
[2009/04/02 13:53:37] <jrojas> jief-: wow thats strange..are you using stored config? or anything else?
[2009/04/02 13:53:50] <jief-> nope
[2009/04/02 13:53:56] <jrojas> jief-: probably a tupid question, but is the nic at Full-Duplex?
[2009/04/02 13:54:06] <jrojas> jief-: iptables running?
[2009/04/02 13:54:14] <jief-> no iptables, fullduplex
[2009/04/02 13:54:18] <jrojas> odd
[2009/04/02 13:54:21] <jief-> GigE interfaces
[2009/04/02 13:54:23] <jief-> indead
[2009/04/02 13:54:24] <jief-> indeed
[2009/04/02 13:54:32] <jrojas> what OS / version of ruby?
[2009/04/02 13:54:34] <Volcane> ESTABLISHED sockets?
[2009/04/02 13:54:43] <jrojas> Volcane: good point.
[2009/04/02 13:55:13] <jrojas> brb meeting time
[2009/04/02 13:55:55] <jief-> not that many
[2009/04/02 13:56:19] <jief-> hmm even stranger
[2009/04/02 13:56:26] <jief-> not sluggish for all of them
[2009/04/02 13:57:20] <jief-> im not going to worry about that actually, those 2 nodes are running on a problematic metal
[2009/04/02 13:57:21] @ pleemans joined channel #puppet
[2009/04/02 13:57:30] <jief-> and that's probably the root of the issue
[2009/04/02 13:57:37] <jief-> if i run puppetd on other nodes, its fine
[2009/04/02 14:00:45] @ webber joined channel #puppet
[2009/04/02 14:00:47] @ shake-n-bake_ joined channel #puppet
[2009/04/02 14:01:01] @ Quit: ezmob: "Bye!"
[2009/04/02 14:02:11] @ Quit: tobias-: "brb"
[2009/04/02 14:02:54] @ alfism joined channel #puppet
[2009/04/02 14:02:57] @ Quit: sigmonsays: Read error: 110 (Connection timed out)
[2009/04/02 14:05:00] @ tobias- joined channel #puppet
[2009/04/02 14:05:59] @ martha left channel #puppet ()
[2009/04/02 14:06:12] @ Quit: lak:
[2009/04/02 14:06:28] @ Quit: siezer: Remote closed the connection
[2009/04/02 14:06:30] @ siezer joined channel #puppet
[2009/04/02 14:07:17] @ Quit: shake-n-bake: Read error: 110 (Connection timed out)
[2009/04/02 14:07:33] @ Quit: MattyM: "ta ta"
[2009/04/02 14:08:27] @ sigmonsays joined channel #puppet
[2009/04/02 14:11:23] @ shake-n-bake joined channel #puppet
[2009/04/02 14:11:25] <Telmo> on an exec can the command take more that 1 command? something like command => "echo hi there; echo hi back" ?
[2009/04/02 14:14:57] <plathrop> Telmo: yes, but be careful
[2009/04/02 14:15:04] <plathrop> Telmo: usually better to write a script.
[2009/04/02 14:15:51] <Telmo> I am just trying to avoid as many movinf parts as possible
[2009/04/02 14:15:58] <Telmo> ^moving
[2009/04/02 14:16:48] <Telmo> need to exec "# prctl -n project.max-shm-memory -v 4gb -r -i project oracle
[2009/04/02 14:16:49] <Telmo> # projmod -s -K "project.max-shm-memory=(priv,4gb,deny)" oracle"
[2009/04/02 14:17:10] <Telmo> I figured I'd try to put them both in the same exec, but I can always split it in 2 execs
[2009/04/02 14:17:41] @ Quit: shake-n-bake_: Read error: 110 (Connection timed out)
[2009/04/02 14:18:08] <plathrop> Telmo: I think you should model that as 2 execs
[2009/04/02 14:18:18] @ Innocenti joined channel #puppet
[2009/04/02 14:18:22] <Telmo> yes, that's what I am thinking also
[2009/04/02 14:18:44] @ Quit: sigmonsays_: Read error: 110 (Connection timed out)
[2009/04/02 14:20:16] @ madrescher joined channel #puppet
[2009/04/02 14:21:06] @ sigmonsays_ joined channel #puppet
[2009/04/02 14:21:30] @ Quit: shake-n-bake: Read error: 60 (Operation timed out)
[2009/04/02 14:21:33] @ mikepea joined channel #puppet
[2009/04/02 14:28:55] @ lak joined channel #puppet
[2009/04/02 14:33:31] <jief-> to use storeconfigs, you only need rails on the daemon? not on the clients?
[2009/04/02 14:33:39] @ Quit: keithlard:
[2009/04/02 14:34:20] @ MattyM joined channel #puppet
[2009/04/02 14:34:51] @ Quit: sigmonsays: Read error: 110 (Connection timed out)
[2009/04/02 14:37:03] <lak> jief-: correctly
[2009/04/02 14:41:31] @ shake-n-bake joined channel #puppet
[2009/04/02 14:41:47] <jief-> im probably missing something else
[2009/04/02 14:44:37] <jief-> ah, the pgsql gem
[2009/04/02 14:46:11] @ Quit: andrewcshafer:
[2009/04/02 14:48:01] @ sigmonsays__ joined channel #puppet
[2009/04/02 14:49:17] @ Quit: Innocenti: Read error: 110 (Connection timed out)
[2009/04/02 14:50:05] @ Quit: lak:
[2009/04/02 14:52:08] @ shake-n-bake_ joined channel #puppet
[2009/04/02 14:56:44] @ Quit: madrescher: Read error: 110 (Connection timed out)
[2009/04/02 14:58:07] @ Quit: shake-n-bake: Read error: 110 (Connection timed out)
[2009/04/02 15:02:11] @ Quit: jief-: "Lost terminal"
[2009/04/02 15:02:45] @ shake-n-bake joined channel #puppet
[2009/04/02 15:02:53] @ Quit: sigmonsays_: Read error: 110 (Connection timed out)
[2009/04/02 15:06:17] @ unxfrek joined channel #puppet
[2009/04/02 15:06:26] @ zahna left channel #puppet ()
[2009/04/02 15:08:32] @ sigmonsays joined channel #puppet
[2009/04/02 15:08:59] @ Quit: shake-n-bake_: Read error: 110 (Connection timed out)
[2009/04/02 15:13:21] @ shake-n-bake_ joined channel #puppet
[2009/04/02 15:18:35] @ Quit: sigmonsays__: Read error: 110 (Connection timed out)
[2009/04/02 15:19:36] @ Quit: shake-n-bake: Read error: 110 (Connection timed out)
[2009/04/02 15:19:37] @ Quit: raphink: Read error: 104 (Connection reset by peer)
[2009/04/02 15:20:49] @ raphink joined channel #puppet
[2009/04/02 15:25:41] @ Quit: unxfrek: "Leaving"
[2009/04/02 15:30:05] @ Quit: fbe: Read error: 104 (Connection reset by peer)
[2009/04/02 15:30:12] @ Quit: shake-n-bake_: Read error: 110 (Connection timed out)
[2009/04/02 15:30:17] @ Quit: d3vilb0x:
[2009/04/02 15:30:35] @ fbe joined channel #puppet
[2009/04/02 15:33:13] @ lak joined channel #puppet
[2009/04/02 15:33:18] @ sigmonsays_ joined channel #puppet
[2009/04/02 15:38:18] @ rgsteele||work joined channel #puppet
[2009/04/02 15:39:12] @ Quit: yarihm: "This computer has gone to sleep"
[2009/04/02 15:40:38] @ Quit: mikepea:
[2009/04/02 15:43:41] @ Quit: bda: Read error: 110 (Connection timed out)
[2009/04/02 15:47:51] @ Quit: sigmonsays: Read error: 110 (Connection timed out)
[2009/04/02 15:48:08] @ shake-n-bake joined channel #puppet
[2009/04/02 15:50:30] @ Quit: ashp: Read error: 113 (No route to host)
[2009/04/02 15:51:28] <jbooth> Anyone ever needed to do kinit from within a puppet recipe? Anyone gotten it to work? :-P
[2009/04/02 15:52:48] @ sigmonsays joined channel #puppet
[2009/04/02 15:56:22] <joe-mac> kinit? isn't that the software that loads a kernel into ram while another kernel is already running?
[2009/04/02 15:59:09] <mattw> joe-mac: that is kexec
[2009/04/02 16:00:06] @ ezmob joined channel #puppet
[2009/04/02 16:01:15] <joe-mac> ah ok
[2009/04/02 16:01:19] <joe-mac> dc time
[2009/04/02 16:01:48] <jbooth> Yeah, kerberos 5's kinit.
[2009/04/02 16:01:53] <jbooth> MIT's krb5 to be exact
[2009/04/02 16:02:18] <jbooth> I can echo \${PASSWORD} | kinit from the command line, but within puppet I'm just getting "preauth failed"
[2009/04/02 16:02:18] <plathrop> jbooth: I tried, and rapidly gave up in frustration.
[2009/04/02 16:03:09] <jbooth> plathrop: bother.
[2009/04/02 16:03:53] <jbooth> Luckily I'm not the type to give up that easily
[2009/04/02 16:04:18] @ Quit: sigmonsays_: Read error: 110 (Connection timed out)
[2009/04/02 16:04:58] <jbooth> I'll beat puppet into submission if it involves tcl/tk. Or really, if it involves expect.
[2009/04/02 16:04:59] @ keithlard joined channel #puppet
[2009/04/02 16:05:34] <plathrop> jbooth: I wish you the best
[2009/04/02 16:06:13] <gepetto> ::trac:: Glossary OfTerms edited by jbarratt @ http://reductivelabs.com/trac/puppet/wiki/GlossaryOfTerms (by jbarratt@serialized.net)
[2009/04/02 16:06:13] <gepetto> ::trac:: Glossary OfTerms edited by jbarratt @ http://reductivelabs.com/trac/puppet/wiki/GlossaryOfTerms (by jbarratt@serialized.net)
[2009/04/02 16:08:12] <FiXion> jbooth: wouldn't it be easiest to just write a small expect script then - and exec that from puppet?
[2009/04/02 16:08:46] <jbooth> FiXion: well, probably yeah. I may end up there... but maybe not.
[2009/04/02 16:08:48] <FiXion> jbooth: perhaps generate the expect script, using a template - if you need a variable answer :)
[2009/04/02 16:09:43] @ glaw joined channel #puppet
[2009/04/02 16:10:41] <jbooth> FiXion: nah, that I don't need.
[2009/04/02 16:12:25] <jbooth> FiXion: But I don't want to distribute the password to all the systems, so I'm trying to do like the firmware password recipe.
[2009/04/02 16:16:29] <FiXion> jbooth: is the template generated on the server or on the client? if it's generated on the client, you'd just "fetch/generate" the password there, and store it in the template for that short period of time.. using a temp file name, so no one can guess it's name.. or some such :)
[2009/04/02 16:16:41] * FiXion goes and looks up the firmware recipe - sounds interesting :)
[2009/04/02 16:18:43] <FiXion> jbooth: doesn't expect take a script from stdin? couldn't you write the template to stdout (so it never gets written to disk anywhere) with the replaced var for password?
[2009/04/02 16:18:57] <FiXion> that should be as secure as the firmware approach, as I see it.
[2009/04/02 16:18:59] <jbooth> Password is on the server
[2009/04/02 16:19:16] <jbooth> Problem is that puppet will log it
[2009/04/02 16:19:24] <jbooth> You have to pass it in an environment variable
[2009/04/02 16:19:38] <jbooth> But that isn't the problem -- kinit is spitting on expect just as puppet as far as I can tell
[2009/04/02 16:19:43] <FiXion> will it log it, if you just use a $var ?
[2009/04/02 16:19:49] <FiXion> hmm.
[2009/04/02 16:19:52] <FiXion> naught kinit
[2009/04/02 16:19:57] <FiXion> naughty
[2009/04/02 16:20:31] <jbooth> if I {interact} in the expect and cut&paste the password -- all good
[2009/04/02 16:20:41] @ yarihm joined channel #puppet
[2009/04/02 16:21:20] <FiXion> jbooth: you could perhaps do kinit with keytab files instead of passwords?
[2009/04/02 16:21:23] <FiXion> jbooth: http://www.stacken.kth.se/lists/heimdal-discuss/2003-11/msg00025.html
[2009/04/02 16:21:57] <FiXion> kinit -k option
[2009/04/02 16:22:19] <jbooth> Puppet server has to kinit then... possible I suppose
[2009/04/02 16:22:36] @ sigmonsays_ joined channel #puppet
[2009/04/02 16:22:38] <FiXion> that would mean you'd generate the keytab file on the server - which is better than a plaintext password atleast
[2009/04/02 16:22:44] <bevans5446> How do you all do manualy runs of puppet? SIGUSR1?
[2009/04/02 16:22:48] <FiXion> I'm not entirely sure of how secure
[2009/04/02 16:22:58] <plathrop> bevans5446: I do puppetd -t with capistrano
[2009/04/02 16:23:02] <jbooth> I'd remove the keytab file post use
[2009/04/02 16:23:18] <FiXion> jbooth: ofcourse
[2009/04/02 16:24:02] <bevans5446> plathrop: does -t == --test?
[2009/04/02 16:24:29] <plathrop> bevans5446: yeah, the worst-named option in all of history
[2009/04/02 16:24:43] <bevans5446> plathrop: agreed
[2009/04/02 16:25:35] <lak> plathrop: patches accepted
[2009/04/02 16:25:42] <lak> it made sense when i named it that
[2009/04/02 16:25:50] <lak> since it's usually used for testing out a configuration on a client
[2009/04/02 16:25:54] <lak> at least, it was at the time
[2009/04/02 16:26:14] <plathrop> lak: I just figured it was too late to change it.
[2009/04/02 16:26:24] @ bda joined channel #puppet
[2009/04/02 16:26:29] <FiXion> jbooth: perhaps if you generate a "one-time" password - and then genrate the the keytab for that - and reset/restore the password afterwards
[2009/04/02 16:26:46] <FiXion> no one would be able to use the keytab for more than a very short timeframe, if they did pick it up.
[2009/04/02 16:26:50] <plathrop> lak: Also, I figured it made sense at the time. I'm already convinced you are a rockstart developer :-P
[2009/04/02 16:26:57] <plathrop> s/start/star/
[2009/04/02 16:26:59] <FiXion> and btw. is the puppet:// protocol encrypted?
[2009/04/02 16:27:42] <bevans5446> would be a better name for the --test option?
[2009/04/02 16:27:56] @ erm_ joined channel #puppet
[2009/04/02 16:28:09] <FiXion> lak: how is -t implemented? how does the new puppetd process talk to the running puppetdaemon?
[2009/04/02 16:28:25] <lak> it ignores any running puppetd
[2009/04/02 16:28:31] <lak> unless the running daemon is in the middle of a run
[2009/04/02 16:28:39] <lak> FiXion: yes, it's encrypted
[2009/04/02 16:28:45] <lak> plathrop: neh, i don't think it's too late to change
[2009/04/02 16:28:59] <FiXion> lak: ok - so it won't harm that there's two running for a moment. and the daemoned one won't start a run, while -t is running
[2009/04/02 16:28:59] <lak> others share your opinion
[2009/04/02 16:29:07] <lak> right
[2009/04/02 16:29:17] <plathrop> lak: Hrm. Maybe I should try to get a patch in time for 0.25
[2009/04/02 16:29:35] @ briandquinn joined channel #puppet
[2009/04/02 16:29:48] @ Quit: briandquinn: Remote closed the connection
[2009/04/02 16:30:22] <bevans5446> I can't for the life of me get puppet to send email reports
[2009/04/02 16:30:35] <bevans5446> I'm sure I'm missing some small detail
[2009/04/02 16:31:48] <bevans5446> would the emails be coming from the puppet master or from each node?
[2009/04/02 16:33:25] @ Quit: yarihm: "This computer has gone to sleep"
[2009/04/02 16:35:53] @ Quit: sigmonsays: Read error: 110 (Connection timed out)
[2009/04/02 16:36:05] <bevans5446> ok. I get it. Puppet doesn't even send email reports. All the docs that say it does are all a part of some sick scheme to slowly drive me insane.
[2009/04/02 16:36:49] @ egerlach joined channel #puppet
[2009/04/02 16:37:40] <jbooth> plathrop: "/usr/bin/expect -c 'spawn /usr/kerberos/bin/kinit vmware-puppet-admin;expect Password {send -- \"[lindex [array get env PASSWORD] 1]\\n\";exp_continue} Authenticated'"
[2009/04/02 16:38:28] <jbooth> Without the exp_continue and Authenticated it doesn't go. Not sure why.
[2009/04/02 16:38:34] @ sigmonsays__ joined channel #puppet
[2009/04/02 16:38:37] <jbooth> But in any case, it does go, so yay!
[2009/04/02 16:38:45] @ shake-n-bake_ joined channel #puppet
[2009/04/02 16:39:42] <plathrop> jbooth: you are crazy man :-P
[2009/04/02 16:39:49] <plathrop> bevans5446: sorry, just don't do reports
[2009/04/02 16:40:08] <jbooth> plathrop: I've done /way too much/ expect in my time.
[2009/04/02 16:41:24] <bevans5446> plathrop: no worries. At this point emailing reports has become my white whale
[2009/04/02 16:41:34] <lak> bevans5446: the server will send reports if you enable the 'tagmail' report
[2009/04/02 16:41:37] <lak> plathrop: don't do them? why not?
[2009/04/02 16:42:20] <bevans5446> lak: so This line under the [puppetmaster] block should work right? "reports = tagmail,store,log"
[2009/04/02 16:42:26] <plathrop> lak: Just don't have a need for them.
[2009/04/02 16:43:37] <plathrop> lak: Well, I mean besides the log report.
[2009/04/02 16:45:20] <lak> bevans5446: puppetmasterd, not puppetmaster
[2009/04/02 16:45:25] <lak> or main, shouldn't matter
[2009/04/02 16:45:31] <lak> only puppetmasterd will pay attention to it
[2009/04/02 16:45:32] @ Quit: shake-n-bake: Read error: 110 (Connection timed out)
[2009/04/02 16:45:37] <bevans5446> oh, yeah...thats what I had
[2009/04/02 16:45:40] <FiXion> hmm reductivelabs must be doing maintenance.. site isn't answering :(
[2009/04/02 16:46:17] <bevans5446> I think I just figured out my problem, stupid sendmail binary is pointing to the wrong MTA
[2009/04/02 16:47:30] @ erm__ joined channel #puppet
[2009/04/02 16:47:35] <hacim> is there a reason why I would want to include a subclass rather than just inherit it?
[2009/04/02 16:49:21] @ shake-n-bake joined channel #puppet
[2009/04/02 16:51:50] @ \ask-_ joined channel #puppet
[2009/04/02 16:52:06] @ Quit: sigmonsays_: Read error: 110 (Connection timed out)
[2009/04/02 16:53:25] <lak> FiXion: works for me...?
[2009/04/02 16:53:30] <lak> the site, i mean
[2009/04/02 16:53:42] <lak> bevans5446: heh, puppet can fix that, but not without your help :)
[2009/04/02 16:54:11] <bevans5446> heh, yeah. I'm adding a rule to my postfix module <blush>
[2009/04/02 16:55:21] @ Quit: shake-n-bake_: Read error: 110 (Connection timed out)
[2009/04/02 16:56:45] @ Quit: ezmob: "Bye!"
[2009/04/02 16:57:49] @ Quit: stijnbe: "Leaving..."
[2009/04/02 16:58:11] @ mfoster joined channel #puppet
[2009/04/02 16:58:35] @ Quit: erm_: Read error: 110 (Connection timed out)
[2009/04/02 16:58:36] @ Quit: sigmonsays__: Read error: 110 (Connection timed out)
[2009/04/02 16:59:26] <FiXion> lak: still not here and a traceroute gets me to host125.datotel.com
[2009/04/02 16:59:34] @ Innocenti joined channel #puppet
[2009/04/02 16:59:43] <FiXion> lak: http://www.reductivelabs.com/trac/puppet/wiki/UsingTags this url for example
[2009/04/02 17:00:43] @ Quit: rgsteele||work: Remote closed the connection
[2009/04/02 17:02:15] @ Quit: pleemans: Read error: 110 (Connection timed out)
[2009/04/02 17:02:43] @ yarihm joined channel #puppet
[2009/04/02 17:03:59] <FiXion> ohh well - I can wait till another day.
[2009/04/02 17:04:06] <FiXion> need some sleep anyhow..
[2009/04/02 17:05:34] @ nico is now known as public_furie
[2009/04/02 17:07:13] @ public_furie is now known as nico
[2009/04/02 17:08:06] @ Quit: walrus: "Leaving"
[2009/04/02 17:11:01] @ Quit: shake-n-bake: Read error: 110 (Connection timed out)
[2009/04/02 17:11:40] @ verwilst joined channel #puppet
[2009/04/02 17:12:43] @ shake-n-bake joined channel #puppet
[2009/04/02 17:14:28] @ Djelibeybi joined channel #puppet
[2009/04/02 17:15:17] @ Quit: lak:
[2009/04/02 17:15:44] <Djelibeybi> gepetto: seen lak
[2009/04/02 17:15:44] <gepetto> Djelibeybi: lak was last seen 26 seconds ago, quitting IRC () and a while before saying "bevans5446: heh, puppet can fix that, but not without your help :)"
[2009/04/02 17:15:54] <Djelibeybi> Narf. Just missed him.
[2009/04/02 17:17:30] @ gebi_ joined channel #puppet
[2009/04/02 17:18:32] <jrojas> Djelibeybi: whatcha need?
[2009/04/02 17:19:22] @ Deesl joined channel #puppet
[2009/04/02 17:19:55] @ Quit: markl_: Remote closed the connection
[2009/04/02 17:20:09] @ Quit: shake-n-bake: Read error: 60 (Operation timed out)
[2009/04/02 17:20:26] <Djelibeybi> jrojas: Oh, I was just following up on an email I sent lak on Wednesday
[2009/04/02 17:20:33] <Djelibeybi> jrojas: About the /etc/sudoers thing
[2009/04/02 17:20:44] @ kambiz is now known as kambiz_away
[2009/04/02 17:22:53] <jrojas> ah
[2009/04/02 17:23:20] @ shake-n-bake joined channel #puppet
[2009/04/02 17:23:48] <Djelibeybi> jrojas: it didn't happen at all since I left on Wednesday. So, it's weird.
[2009/04/02 17:25:09] @ lak joined channel #puppet
[2009/04/02 17:25:45] <Djelibeybi> Ah, there we go.
[2009/04/02 17:26:00] <Djelibeybi> lak: since I sent that email, the files have not disappeared. So I'm officially confused.
[2009/04/02 17:26:12] <lak> strange
[2009/04/02 17:26:21] <Djelibeybi> lak: but, I'm about to upgrade to 0.24.8 anyway, so unless it happens again, I'm going to chalk it up to global warming/solar flare radiation.
[2009/04/02 17:26:24] <lak> Djelibeybi: yeah, we're having tornado warnings and stuff here, kinda interfering with my work
[2009/04/02 17:26:39] <Djelibeybi> lak: Ah, fun.
[2009/04/02 17:28:31] @ Quit: gebi: Read error: 113 (No route to host)
[2009/04/02 17:32:32] @ Quit: Innocenti: Client Quit
[2009/04/02 17:32:32] @ Quit: koojoo: Read error: 110 (Connection timed out)
[2009/04/02 17:33:28] @ Quit: mvn071: Remote closed the connection
[2009/04/02 17:39:28] <grim_radical> new IRC server: pe-ub-1.lab.dgslab.com ...this one is disappearing in a few minutes
[2009/04/02 17:39:35] <grim_radical> crap
[2009/04/02 17:39:41] <grim_radical> wrong network. :P
[2009/04/02 17:39:56] @ Quit: bgupta: Read error: 104 (Connection reset by peer)
[2009/04/02 17:40:11] @ bgupta joined channel #puppet
[2009/04/02 17:40:52] @ Quit: shake-n-bake: Read error: 110 (Connection timed out)
[2009/04/02 17:42:20] @ unxfrek joined channel #puppet
[2009/04/02 17:45:24] <hacim> i can do this in a template:
[2009/04/02 17:45:33] <hacim> <% if variable -%>
[2009/04/02 17:46:13] @ Quit: lak:
[2009/04/02 17:46:37] <hacim> but, i want to do the inverse
[2009/04/02 17:46:51] <hacim> like: <% if not variable -%>
[2009/04/02 17:46:59] <hacim> that doesn't work
[2009/04/02 17:47:50] <pietro> hacim: does 'unless' work?
[2009/04/02 17:48:39] <Volcane> you cant check if a variable is set/exists with if variable in a template
[2009/04/02 17:48:40] @ Quit: erm__: "leaving"
[2009/04/02 17:49:00] <hacim> Volcane: yes you can, we talked about this the other day
[2009/04/02 17:49:17] <hacim> Volcane: <% if has_variable?("private_ip") -%>
[2009/04/02 17:49:18] <hacim> that works
[2009/04/02 17:49:25] <hacim> but if the variable is set to "false"
[2009/04/02 17:49:25] <Volcane> and we said u had to use has_variable?("foo")
[2009/04/02 17:49:33] <Volcane> that is not the same as if variable
[2009/04/02 17:49:34] @ taggart joined channel #puppet
[2009/04/02 17:49:56] <hacim> right, i want to test if the variable is set to "false"
[2009/04/02 17:49:59] <Volcane> unless has_variable?("foo") is the inverse
[2009/04/02 17:50:00] @ benblack joined channel #puppet
[2009/04/02 17:50:20] <hacim> Volcane: hm
[2009/04/02 17:50:46] <hacim> i'm not sure if its a variable or not
[2009/04/02 17:50:49] <hacim> i'm doing this:
[2009/04/02 17:50:51] <hacim> $is_mxserver = $mxserver ? { '' => false, default => $mxserver }
[2009/04/02 17:50:59] <hacim> i want to test to see if its set to false
[2009/04/02 17:51:40] <hacim> this is maybe the ugly way: <% elsif instance_variable_get("@#{is_mxserver}").to_s = "false" -%}
[2009/04/02 17:53:08] <hacim> maybe all we have to do is: <%- if is_mxserver.to_s == 'false' then -%>
[2009/04/02 17:53:11] <hacim> ?
[2009/04/02 17:53:37] <taggart> is there a logical not operator? can you do <% elsif ! is_mxserver -%>?
[2009/04/02 17:55:13] <Volcane> well if you set $is_mxserver to ""
[2009/04/02 17:55:16] <Volcane> that means it exists
[2009/04/02 17:55:22] <Volcane> and so has_variable? will say it exist
[2009/04/02 17:55:35] <hacim> right
[2009/04/02 17:55:40] <hacim> i'm not using has_variable
[2009/04/02 17:55:54] <Volcane> why dont you just set it to something sensible and do if is_mxserver == "something sensible" ?
[2009/04/02 17:56:01] <hacim> i'm not sure if I have to do instance_variable_get() or if I can just do .to_s
[2009/04/02 17:56:11] <hacim> Volcane: its set to false
[2009/04/02 17:56:13] <Volcane> rather than try to do the boolean true/false thing, whcih puppet isnt exactly awesome with
[2009/04/02 17:56:16] <hacim> $is_mxserver = $mxserver ? { '' => false, default => $mxserver }
[2009/04/02 17:56:32] <hacim> $is_mxserver is set either to false or whatever else
[2009/04/02 17:56:38] <hacim> i'm testing $is_mxserver
[2009/04/02 17:57:19] @ ido left channel #puppet ()
[2009/04/02 17:59:05] @ Quit: MattyM: Read error: 60 (Operation timed out)
[2009/04/02 18:00:19] @ lak joined channel #puppet
[2009/04/02 18:01:18] <hacim> looks like <%- if is_mxserver.to_s == 'false' then -%> works
[2009/04/02 18:01:34] @ MattyM joined channel #puppet
[2009/04/02 18:01:35] <Volcane> lak: can't say i am awesomly excited about big increase in master side requirements :(
[2009/04/02 18:02:37] @ cwebber_ joined channel #puppet
[2009/04/02 18:02:47] <Volcane> hacim: you could just set it to "false" and not false
[2009/04/02 18:02:51] <Volcane> same end result
[2009/04/02 18:03:12] @ Quit: MrHeavy: "Ex-Chat"
[2009/04/02 18:04:48] <Volcane> lak: will it need many other gems too?
[2009/04/02 18:04:58] <lak> i hope not
[2009/04/02 18:05:04] <lak> well, not for the simple stuff
[2009/04/02 18:05:12] <lak> for larger installs, yeah, it almost certainly would
[2009/04/02 18:05:36] @ Quit: cwebber: Success
[2009/04/02 18:06:07] <Volcane> found things like the mysql gems particularly shit to package up properly :(
[2009/04/02 18:06:18] @ Quit: cwebber_: Client Quit
[2009/04/02 18:08:04] @ ido joined channel #puppet
[2009/04/02 18:08:19] @ Quit: jmeeuwen: Read error: 110 (Connection timed out)
[2009/04/02 18:08:48] @ mfoster left channel #puppet ()
[2009/04/02 18:09:46] <ido> 11
[2009/04/02 18:10:14] @ ido left channel #puppet ()
[2009/04/02 18:14:57] @ Quit: glaw: ""Remember, information is not knowledge, knowledge is not wisdom, wisdom is not truth, truth is not beauty, beauty is not lov
[2009/04/02 18:15:05] <jrojas> hm...things are changing for puppetmasteR?
[2009/04/02 18:17:49] <jrojas> ahh just caught up on email...interesting.
[2009/04/02 18:18:08] @ omry joined channel #puppet
[2009/04/02 18:18:33] @ madrescher joined channel #puppet
[2009/04/02 18:21:03] @ Quit: benblack: "Leaving..."
[2009/04/02 18:21:05] <Djelibeybi> lak: I think I've found it. Something is causing puppetd to crash
[2009/04/02 18:21:13] <lak> ah
[2009/04/02 18:21:21] <lak> that would cause truncation, indeed
[2009/04/02 18:21:23] <Djelibeybi> lak: I'm seeing a status of "puppetd dead but pid file exists"
[2009/04/02 18:21:26] <lak> or could, anyway
[2009/04/02 18:21:32] <lak> strange
[2009/04/02 18:21:45] <lak> 0.24.7, right?
[2009/04/02 18:22:00] <Djelibeybi> For now. Puppet is busy upgrading itself to 0.24.8 though
[2009/04/02 18:22:40] <jrojas> hm...upgrading...i need to test passenger and 24.8...uhg
[2009/04/02 18:23:19] <Djelibeybi> lak: do you know if there is a feature request or a simple way to do a "first-run" config?
[2009/04/02 18:23:20] @ nakano is now known as nakano_
[2009/04/02 18:23:38] <Djelibeybi> lak: I'd love to set a few simple things to happen on Puppet'd first run (set RPM repos, for example)
[2009/04/02 18:23:55] <lak> why?
[2009/04/02 18:24:12] <jrojas> Djelibeybi: just tell the package type to require Yumrepo["blah}
[2009/04/02 18:24:19] <jrojas> err you get the idea
[2009/04/02 18:24:33] <Djelibeybi> jrojas: yes, I take your point.
[2009/04/02 18:24:44] <Djelibeybi> jrojas: I need to recheck all my dependencies, I think
[2009/04/02 18:25:06] <jrojas> dependencies are a pain in the ass, especially if you didnt get them straight from the beginning.
[2009/04/02 18:25:09] <Volcane> theres lots of use for a small first run
[2009/04/02 18:25:15] <Volcane> managing dependencies is just too har
[2009/04/02 18:25:19] <jrojas> nah
[2009/04/02 18:25:21] <jrojas> its easy
[2009/04/02 18:25:27] <jrojas> you just need to do it right :P
[2009/04/02 18:25:48] <Volcane> Djelibeybi: i have a environment called 'bootstrap' on the master that has a single node only, one that sets the bootstrap stuff.
[2009/04/02 18:26:00] <jrojas> Volcane: thats a good idea...
[2009/04/02 18:26:07] <Volcane> Djelibeybi: first run is there, once all the boostrap stuff is done, a new puppet.conf goes out that sets it in the right place
[2009/04/02 18:26:25] <Djelibeybi> Volcane: nice idea, thanks.
[2009/04/02 18:26:40] <Volcane> future runs include all the stuff thats in bootstrap, but it just ofcouse makes it MUCH easier to make sure a couple of sane things happen first
[2009/04/02 18:26:42] <jrojas> Volcane: but what happens when puppet tries to refresh itself right after the puppet.conf was changed and didnt get through the bootstrap manifest?
[2009/04/02 18:27:13] <Volcane> jrojas: the bootstrap is pretty simple, 20 or so resources, dead easy to make sure that puppet.conf only goes out at the end when everything else was succesfull
[2009/04/02 18:27:15] @ Quit: madrescher: Read error: 104 (Connection reset by peer)
[2009/04/02 18:27:35] <Volcane> include bootstrap
[2009/04/02 18:27:48] <Volcane> file{/etc/puppet/puppet.conf: require => Class["bootstrap"]}
[2009/04/02 18:27:49] <Volcane> trivial.
[2009/04/02 18:28:19] <jrojas> hmm..
[2009/04/02 18:28:56] @ madrescher joined channel #puppet
[2009/04/02 18:29:10] <Volcane> you could also tag the classes with the right tag and at bootstrap just run the tag
[2009/04/02 18:29:31] <Volcane> but i just found the environment thing a bit easier to realise in my case
[2009/04/02 18:31:50] <jrojas> yeah..i tend to not worry about it, my puppet first run works real well. if there is anything failed it resolves itself at the next run
[2009/04/02 18:32:41] <Volcane> yeah, careful design can make it easier but there are a few "features"
[2009/04/02 18:32:42] <Volcane> like
[2009/04/02 18:32:51] <Volcane> if you start puppet, puppet installs a package that creates a user
[2009/04/02 18:33:00] <Volcane> and later in that puppet run something requires the user the package made
[2009/04/02 18:33:09] <Volcane> puppet wont know the user exist yet till the next run
[2009/04/02 18:33:31] <Volcane> theres a few things like that
[2009/04/02 18:33:57] <jrojas> ldap usually solves that for me, I just require ldap stuff to be done sooner than most other items
[2009/04/02 18:34:31] <Volcane> do you even have your system accounts like 'nagios' etc in ldap?
[2009/04/02 18:34:37] <Djelibeybi> jrojas: yes, that's true. It sorts itself out after a run or two. :)
[2009/04/02 18:34:50] @ Quit: yarihm: "Leaving"
[2009/04/02 18:35:27] @ Quit: jsm: "Leaving."
[2009/04/02 18:35:55] <jrojas> Volcane: we have a strange environment that does include some system accounts like nagios inside of ldap, however, they are really weird active accounts that do need host restrictions via ldap+netgroups
[2009/04/02 18:36:18] <Volcane> nods, my machines are spread all over the place, like 1 box in a isp in some shit town
[2009/04/02 18:36:24] <Volcane> so no such thing as ldap etc
[2009/04/02 18:36:34] <jrojas> yeah , that does make it tough..
[2009/04/02 18:37:09] <jrojas> luckily enough, before I started our puppet deployment, I was able to push a DNS "Naming Standard"
[2009/04/02 18:37:46] <jrojas> so it because really really easy to logically determine what a host should get via modules and suck
[2009/04/02 18:37:49] @ ^authentic joined channel #puppet
[2009/04/02 18:37:50] <jrojas> suck = such
[2009/04/02 18:38:50] <Volcane> yeah thats kelw
[2009/04/02 18:38:52] <Volcane> kewl
[2009/04/02 18:39:28] <jrojas> yeah, it is pretty nifty, no need for a node classification tool etc etc... just one site.pp with a logic block in it
[2009/04/02 18:39:39] <Volcane> hehe
[2009/04/02 18:40:05] <Volcane> my machines do lots of different things, so nodes are quite different often
[2009/04/02 18:40:36] <jrojas> yeah, the other good part about this deployment, is its 80% xen vm based.
[2009/04/02 18:40:42] <jrojas> so one vm has one job type stuff
[2009/04/02 18:40:47] <Volcane> yeah
[2009/04/02 18:41:01] @ fujin joined channel #puppet
[2009/04/02 18:41:24] * Volcane 's got nifty xen::vm defines that makes logical volumes, configs, kickstart configs and all that kind of thing :)
[2009/04/02 18:42:48] <jrojas> nice. i was a little weary about using puppet for that. especially when they are technically two different components, so I made a kickstart templating thing instead....brb
[2009/04/02 18:44:16] <Volcane> my templates are almost all the same, ks files live on the dom0, and they're all identical apart from ip/netmask/gateway/distro source
[2009/04/02 18:44:43] <Volcane> dom0 has a caching nameserver, webserver that only allows the domUs on it to read the ks files etc
[2009/04/02 18:45:31] <Volcane> so one box at random isp somewhere is a little self contained instance of my std build with all the normal bits
[2009/04/02 18:45:56] @ Quit: Deesl: Read error: 145 (Connection timed out)
[2009/04/02 18:46:09] @ ezmob joined channel #puppet
[2009/04/02 18:48:30] @ Quit: authentic: Read error: 110 (Connection timed out)
[2009/04/02 18:48:37] @ ^authentic is now known as authentic
[2009/04/02 18:52:44] @ benblack joined channel #puppet
[2009/04/02 18:53:48] @ Quit: rmiller4pi8: Read error: 60 (Operation timed out)
[2009/04/02 18:55:22] @ cwebber joined channel #puppet
[2009/04/02 18:57:07] <jrojas> who wants to see a screenshot of my version of puppetshow
[2009/04/02 18:59:33] @ gstratton joined channel #puppet
[2009/04/02 19:02:03] <grim_radical> jrojas: let
[2009/04/02 19:02:07] @ fujin_ joined channel #puppet
[2009/04/02 19:02:07] <grim_radical> jrojas: let's see it
[2009/04/02 19:02:36] @ PaulWay joined channel #puppet
[2009/04/02 19:03:52] <PaulWay> Hi all!
[2009/04/02 19:04:08] <jrojas> http://www.nothingbeatsaduck.com/random_photos/Picture%2011.png
[2009/04/02 19:04:24] @ nasrat joined channel #puppet
[2009/04/02 19:04:37] <Volcane> cute
[2009/04/02 19:05:04] <jrojas> yeah, its functional, it works, just need to write some tests and I can release it
[2009/04/02 19:05:24] <Volcane> what language?
[2009/04/02 19:05:34] <jrojas> its in rails
[2009/04/02 19:05:36] <PaulWay> I'm trying to generate a list of requirements in a defined function using this bit of code: http://rafb.net/p/ADsbwH43.html
[2009/04/02 19:05:46] <PaulWay> jrojas: that's awesome - where can I get some?!
[2009/04/02 19:06:01] <jrojas> PaulWay: soon, like i said I have a few updates to make.
[2009/04/02 19:06:18] <PaulWay> I'm being told "Cannot append, variable requires is defined in this scope" at the += line
[2009/04/02 19:06:21] <jrojas> adding the graphs and such were a nice touch for management and such too see.
[2009/04/02 19:06:29] <PaulWay> jrojas: cool - great stuff!
[2009/04/02 19:06:41] <PaulWay> Is there a way to integrate that in with Nagios?
[2009/04/02 19:06:55] <jrojas> the puppetshow stuff?
[2009/04/02 19:07:00] <PaulWay> Yeah.
[2009/04/02 19:07:22] <jrojas> you could I guess in a way do it, but its more of just a view to make sure things are looking ok, graphs and such
[2009/04/02 19:07:24] @ mfoster joined channel #puppet
[2009/04/02 19:07:25] <PaulWay> Essentially have each host's status show up as a service in nagios.
[2009/04/02 19:07:48] <PaulWay> I'm just working on updating our Nagios config and trying to integrate all of that kind of stuff in.
[2009/04/02 19:07:54] <jrojas> hm..
[2009/04/02 19:08:03] @ Quit: cwebber:
[2009/04/02 19:08:18] <PaulWay> The code I'm copying is basically at http://reductivelabs.com/trac/puppet/wiki/LanguageTutorial#id23
[2009/04/02 19:08:38] <jrojas> I have my puppet clients run one constant change which is an erb template that just includes a timestamp, then with nrpe I check for the daemon running, then check the file age on the file, if both are good, puppet is doing its job
[2009/04/02 19:08:40] <PaulWay> Although I'm using an if rather than appending inside a class.
[2009/04/02 19:09:10] <PaulWay> Now that's clever - I'll look into that.
[2009/04/02 19:09:22] <PaulWay> Any ideas on my scope problem would be appreciated!
[2009/04/02 19:09:29] <Djelibeybi> Can puppet restart itself safely? I.e. if I define a service { "puppet": } and I have package { "puppet": notify => Service["puppet"], }
[2009/04/02 19:09:41] <Djelibeybi> So, if the puppet rpm is updated, Puppet itself needs to be restarted. Would that work?
[2009/04/02 19:09:43] <Volcane> jrojas: you could just check the age of /var/lib/puppet/state.yaml
[2009/04/02 19:09:55] <jrojas> Volcane: that is a very good point.....
[2009/04/02 19:10:05] @ cwebber joined channel #puppet
[2009/04/02 19:10:09] <plathrop> Djelibeybi: There are definite gotchas in that.
[2009/04/02 19:10:21] <jrojas> Djelibeybi: as long as the configs for the puppet client arent replaces when the package is installed yeah i dont see a reason why you shouldnt do that
[2009/04/02 19:10:23] <Volcane> state.yaml shows its running, ,localconfig.yaml shows you the master is succesfully compiling
[2009/04/02 19:10:24] <plathrop> Djelibeybi: based on how Puppet detects a service is running
[2009/04/02 19:10:41] <plathrop> Djelibeybi: you may wnt to search the list archives, there's a fair amount of discussion on it.
[2009/04/02 19:11:08] <jrojas> plathrop: wasnt there a mutual restart thing that covered this?
[2009/04/02 19:11:35] <Volcane> if u restart it, it gets a signal, remembers it and restarts itself at the end of the run
[2009/04/02 19:11:55] @ Quit: verwilst: "Ex-Chat"
[2009/04/02 19:12:24] <Djelibeybi> Ok, I'll remove the notify until I do more research into it
[2009/04/02 19:12:34] <plathrop> jrojas: I'm not sure. I never even considered restarting Puppet when I upgrade. What a silly oversight.
[2009/04/02 19:12:45] <Djelibeybi> The initial version is 0.24.7, upgrading to 0.24.8
[2009/04/02 19:13:07] <jrojas> im pondering upgrading to 24.8...im not sure tho..
[2009/04/02 19:13:20] <jrojas> does anyone have 24.8 running behind passenger?
[2009/04/02 19:13:48] @ Quit: cwebber: Client Quit
[2009/04/02 19:13:49] <Volcane> the rpms restart it when you upgrade anyway
[2009/04/02 19:13:50] <WALoeIII> does 24.8 use Rack?
[2009/04/02 19:13:54] <Volcane> i suppose the debs too
[2009/04/02 19:13:57] @ nakano_ is now known as nakano
[2009/04/02 19:14:09] <Djelibeybi> Volcane: ah, cool. :)
[2009/04/02 19:14:30] <WALoeIII> I didn't hear anything about rack integration, I would be psyched to move puppetmaster into passenger, one less thing to handle
[2009/04/02 19:14:40] <Volcane> theres a wiki page
[2009/04/02 19:14:46] <jrojas> WALoeIII: ...you can do it without puppet running on rack
[2009/04/02 19:15:01] <Volcane> http://reductivelabs.com/trac/puppet/wiki/UsingPassenger
[2009/04/02 19:15:08] @ kambiz_away is now known as kambiz
[2009/04/02 19:15:16] @ Quit: unxfrek: "Leaving"
[2009/04/02 19:15:25] <WALoeIII> ah this came out in 24.6
[2009/04/02 19:15:27] <WALoeIII> sweet!
[2009/04/02 19:15:50] <jrojas> WALoeIII: its pretty good, you just have to make sure you configure the passenger options if your installation is somewhat larger than normal
[2009/04/02 19:17:17] @ anarcat joined channel #puppet
[2009/04/02 19:17:22] <anarcat> hi
[2009/04/02 19:17:24] <PaulWay> Any help with my scope problem? please?
[2009/04/02 19:17:24] <jrojas> WALoeIII: im not sure if it breaks puppetrun tho. I am still trying to figure out why my puppetruns are returning a 500 error. there was a post on the mailing list about it last night but I think I was the only one who replied
[2009/04/02 19:17:34] <anarcat> i'm having issues in factor about aliased interfaces
[2009/04/02 19:17:37] <anarcat> i fixed it with a regex
[2009/04/02 19:17:46] <anarcat> and i see that the latest factor still has this problem
[2009/04/02 19:17:49] <jrojas> PaulWay: its hard to tell what you are trying to accomplish, so its hard to help
[2009/04/02 19:18:00] <jrojas> anarcat: ?
[2009/04/02 19:18:10] <Djelibeybi> Ah, crap.
[2009/04/02 19:18:28] <Djelibeybi> Facter doesn't see an lsbmajdistrelease for OEL and jamesturnbull has disappeared to Thailand.
[2009/04/02 19:18:43] <PaulWay> Sorry, I'll explain. Basically I have a define to write the NRPE command configuration for a service.
[2009/04/02 19:19:02] <Volcane> Djelibeybi: u defo have the lsb junk installed right?
[2009/04/02 19:19:26] <Djelibeybi> Volcane: yup. It was working fine with the previous version of Facter (1.5.2)
[2009/04/02 19:19:30] <Volcane> ah
[2009/04/02 19:19:30] <PaulWay> The whole thing is http://rafb.net/p/UTTLWB59.html
[2009/04/02 19:19:32] <Djelibeybi> Facter 1.5.4 and the value has disappeared.
[2009/04/02 19:19:35] <anarcat> jrojas: so i have an interface named "eth0:foo" here.. factor will see only eth0 and will generate a list of interface consisting of duplicate "eth0"
[2009/04/02 19:19:36] <Djelibeybi> Off to the Bug Tracker!
[2009/04/02 19:19:50] <Volcane> works for me on centos 5.3, but that might not say a whole lot
[2009/04/02 19:19:56] <PaulWay> Basically I want to be able to specify a nagios plugin for the file to depend on, so it gets installed by Puppet.
[2009/04/02 19:20:01] <jrojas> anarcat: i just checked on something related in the facter code, give me one second.
[2009/04/02 19:20:09] @ Quit: fujin: Connection timed out
[2009/04/02 19:20:33] <anarcat> although hum
[2009/04/02 19:20:42] <anarcat> the 1.5.x seems to be a complete rewrite of that
[2009/04/02 19:20:43] <PaulWay> The lines at 18-21 are the new bit I added, and changed 36 from 'require => File["/etc/nagios/nrpe.d"],'
[2009/04/02 19:20:50] <PaulWay> jrojas: is that making sense so far?
[2009/04/02 19:21:01] <jrojas> PaulWay: sort of.. what was the error again?
[2009/04/02 19:21:23] <PaulWay> err: Could not retrieve catalog: Cannot append, variable requires is defined in this scope at ...
[2009/04/02 19:21:38] <PaulWay> The error line is line 21 in the paste.
[2009/04/02 19:21:57] @ Quit: nasrat:
[2009/04/02 19:21:57] @ kambiz is now known as kambiz_away
[2009/04/02 19:22:25] <Djelibeybi> Switched from lsbmajdistrelease to operatingsystemrelease
[2009/04/02 19:22:35] @ Quit: taggart: "Leaving"
[2009/04/02 19:23:08] <Volcane> PaulWay: erm, I'd do something like this i guess http://pastie.org/435445
[2009/04/02 19:23:18] <anarcat> hacim: you the facter maintainer now? ;)
[2009/04/02 19:23:34] <Volcane> PaulWay: http://reductivelabs.com/trac/puppet/wiki/LanguageTutorial#resource-defaults
[2009/04/02 19:24:03] <jrojas> anarcat: what version of facter / OS?
[2009/04/02 19:24:31] <anarcat> jrojas: 1.5.1, debian etch (lenny backport)
[2009/04/02 19:24:40] <anarcat> so i see 1.5.4 may not have this problem
[2009/04/02 19:24:54] <anarcat> but i tried installing it (ruby install.rb) and i got this friendly message: /usr/local/lib/site_ruby/1.8/facter/util/manufacturer.rb:30:in `dmi_find_system_info': undefined method `each_pair' for "Type:":String (NoMethodError)
[2009/04/02 19:25:06] <jrojas> weird..
[2009/04/02 19:25:11] <anarcat> not good
[2009/04/02 19:25:15] <anarcat> now i broke my facter
[2009/04/02 19:25:40] <jrojas> i believe that each_pair applies to hashes not strings..
[2009/04/02 19:25:51] <jrojas> try gem install facter ?
[2009/04/02 19:26:33] <anarcat> gem not found
[2009/04/02 19:26:34] <Volcane> why not just use the rpm?
[2009/04/02 19:26:42] <jrojas> Volcane: debian
[2009/04/02 19:26:45] <Volcane> oh right
[2009/04/02 19:26:50] <Volcane> broken by design :P
[2009/04/02 19:27:14] <anarcat> ... i will refrain from answering that troll
[2009/04/02 19:27:22] * Volcane again wishes for a special /mode that identifies debian users so we know to expect weird behaviour :P
[2009/04/02 19:27:33] <anarcat> ugh
[2009/04/02 19:27:42] <anarcat> okay, well, thanks but no thanks
[2009/04/02 19:27:44] <PaulWay> Volcane: Ah, so just include the package requirement directly in the define! Of course.
[2009/04/02 19:27:45] <PaulWay> Thanks!
[2009/04/02 19:27:53] <anarcat> i'll come back when i'll have ported the most recent facter
[2009/04/02 19:28:03] <PaulWay> Volcane: hahahahah - oh, those funny Debian users.
[2009/04/02 19:28:15] <jrojas> debian is an alright os.
[2009/04/02 19:28:34] <anarcat> yeah we're funny like that
[2009/04/02 19:28:44] <anarcat> we like a stable os that doesn't change every freakin 6 months
[2009/04/02 19:28:46] <anarcat> oups, i failed
[2009/04/02 19:29:00] <jrojas> anarcat: you installed from the latest tarball from the reductivelabs site?
[2009/04/02 19:29:14] <anarcat> jrojas: i did, got the above error
[2009/04/02 19:29:22] <anarcat> i reinstalled the 1.5.1 version since then
[2009/04/02 19:29:31] <anarcat> i took this tarball: http://projects.reductivelabs.com/attachments/download/554/facter-1.5.4.tgz
[2009/04/02 19:29:38] <jrojas> weird.
[2009/04/02 19:29:39] <anarcat> jrojas: thank you for your patience btw
[2009/04/02 19:29:46] <anarcat> yeah well, this is a weird machine
[2009/04/02 19:29:53] <anarcat> there's so many backported packages now it's ridiculous
[2009/04/02 19:30:03] <anarcat> we're waiting for the maintenance window to push it to lenny
[2009/04/02 19:30:06] <PaulWay> Volcane: I could also set 'ensure => latest' at e.g. line 4 in your paste too, yes?
[2009/04/02 19:30:37] <jrojas> anarcat: yeah i just noticed that somehwere on the lists someone was talking about all the backports
[2009/04/02 19:30:39] * Volcane only has ancient facter on his debian boxen, but i think someone here said they needed more than just lsb-base to make those things work
[2009/04/02 19:30:49] <Volcane> PaulWay: yup
[2009/04/02 19:31:19] <PaulWay> Cool.
[2009/04/02 19:31:25] <anarcat> so gems is failing too
[2009/04/02 19:31:33] <anarcat> i'm outa here, i'll just sleep on this
[2009/04/02 19:31:34] <anarcat> grr
[2009/04/02 19:31:35] <jrojas> anarcat: is this your pastie? http://pastie.org/pastes/404560
[2009/04/02 19:31:40] <anarcat> no
[2009/04/02 19:31:52] <jrojas> looks like the same issue
[2009/04/02 19:31:59] <anarcat> although it looks the same yeah
[2009/04/02 19:32:01] <anarcat> fun
[2009/04/02 19:32:25] <anarcat> Pasted: 31 days ago
[2009/04/02 19:32:35] @ Quit: jizquierdo: "Relax, its only ONES and ZEROS!"
[2009/04/02 19:32:39] <jrojas> give me one second, I am going to dig through some stuff real quick, what is your ruby version?
[2009/04/02 19:33:07] <anarcat> ruby 1.8.5 (2006-08-25) [x86_64-linux]
[2009/04/02 19:33:25] <jrojas> there are only two lines in manufacturer.rb that use each_pair
[2009/04/02 19:34:06] <Volcane> can you post the output of /usr/sbin/dmidecode?
[2009/04/02 19:34:41] <jrojas> Volcane: Facter::Manufacturer.dmi_find_system_info(query)
[2009/04/02 19:34:46] <jrojas> query is a hash
[2009/04/02 19:35:08] <jrojas> def self.dmi_find_system_info(name)
[2009/04/02 19:35:28] <anarcat> eh, dmidecode gives me a permission denied when running as a user
[2009/04/02 19:35:40] <anarcat> although that doesn't make 1.5.1 crahs
[2009/04/02 19:35:49] <PaulWay> Volcane: OK, different problem - I've got http://rafb.net/p/bnXV5N37.html defined now, and I'm getting "You cannot specify more than one of content, source, target" at line 40 in that paste.
[2009/04/02 19:35:49] <anarcat> $ /usr/sbin/dmidecode
[2009/04/02 19:35:50] <anarcat> # dmidecode 2.8
[2009/04/02 19:35:55] <anarcat> /dev/mem: Permission denied
[2009/04/02 19:36:03] <jrojas> does 1.5.1 use dmidecode ?
[2009/04/02 19:36:05] <PaulWay> I appreciate your help here... :-)
[2009/04/02 19:36:10] <anarcat> running as root gives me: /dev/mem: mmap: Bad address
[2009/04/02 19:36:16] <anarcat> (this is a xen vserver)
[2009/04/02 19:36:18] <anarcat> domU
[2009/04/02 19:36:23] <jrojas> hmm
[2009/04/02 19:36:26] <jrojas> that might be an issue
[2009/04/02 19:36:36] <anarcat> ah!
[2009/04/02 19:36:37] <Volcane> PaulWay: oh i see what u wanted iwth the ensure => latest, file doesnt understand that, take out line 23
[2009/04/02 19:36:44] @ Quit: ezmob: "Bye!"
[2009/04/02 19:36:48] @ rmiller4pi8 joined channel #puppet
[2009/04/02 19:36:52] <anarcat> jrojas: should i file this as a bug?
[2009/04/02 19:37:13] <jrojas> no, it seems very situational because of the vm
[2009/04/02 19:37:14] <Volcane> my facter just doesnt set the 'manufacturer' fact is dmidecode doesnt give sane output
[2009/04/02 19:37:22] <PaulWay> Volcane: ah, right. Sorry!
[2009/04/02 19:37:44] <PaulWay> Yep, that looks so much better - thanks!
[2009/04/02 19:37:50] <anarcat> jrojas: maybe i'm confusing the issues with Volcane's
[2009/04/02 19:37:55] <jrojas> hehhe
[2009/04/02 19:38:03] <jrojas> and we havent been drinking yet.
[2009/04/02 19:38:09] <jrojas> well maybe Volcane has.
[2009/04/02 19:38:10] <anarcat> jrojas: do not assume this is dmidecode related
[2009/04/02 19:38:13] <anarcat> haha
[2009/04/02 19:38:15] * Volcane has no issue, just saying how facter 1.5.4 behaves in my similar situation
[2009/04/02 19:38:17] <anarcat> i haven't, yet
[2009/04/02 19:38:31] <jrojas> what version of dmidecode?
[2009/04/02 19:38:40] <anarcat> 2.8
[2009/04/02 19:38:51] <Volcane> xen vm, dmidecode says /dev/mem: mmap: Bad address too but facter is clever enough then just not to add the facts
[2009/04/02 19:39:09] <anarcat> Volcane: in 1.5.4 too?
[2009/04/02 19:39:21] <Volcane> i wonder if when you installed it with the gem there werent some old files left over causing chaos?
[2009/04/02 19:39:24] <jrojas> crw-r----- 1 root kmem 1, 1 Feb 6 17:02 /dev/mem
[2009/04/02 19:39:33] <jrojas> thats on one of my domUs
[2009/04/02 19:39:34] <anarcat> Volcane: very likely
[2009/04/02 19:39:50] <Volcane> jrojas: xen vms dont let you query the dmi structures, facter should just ignore them
[2009/04/02 19:40:03] <jrojas> Volcane: true.
[2009/04/02 19:40:18] <Volcane> anarcat: rm -rf /usr/lib/ruby/site_ruby/1.8/facter (or equiv) and reinstall the gem
[2009/04/02 19:40:28] <Volcane> just to be sure
[2009/04/02 19:40:56] <anarcat> okay let's try that
[2009/04/02 19:41:26] <anarcat> eh
[2009/04/02 19:41:27] <anarcat> it works
[2009/04/02 19:41:28] <anarcat> oh
[2009/04/02 19:41:35] <anarcat> $ facter -v
[2009/04/02 19:41:36] <anarcat> 1.5.4
[2009/04/02 19:41:38] <Volcane> :)
[2009/04/02 19:41:40] <anarcat> interfaces => eth0,eth1,eth0,eth0,sit0
[2009/04/02 19:41:45] <anarcat> whee
[2009/04/02 19:41:54] <Volcane> gem--
[2009/04/02 19:41:56] <anarcat> so the bug *is* still there, even after lak's rewrite
[2009/04/02 19:41:59] <Volcane> its a crap little system
[2009/04/02 19:42:02] <anarcat> yeah
[2009/04/02 19:42:13] <anarcat> that wasn't through gem though, it was through "ruby install.rb"
[2009/04/02 19:42:20] <anarcat> and debian has trouble with gem too
[2009/04/02 19:42:34] <Volcane> anarcat: whats the problem with the interfaces? (sorry was out when you started talking abt it)
[2009/04/02 19:42:41] <anarcat> Volcane: duplicates?
[2009/04/02 19:42:44] <Volcane> ah
[2009/04/02 19:43:01] <Volcane> interfaces => eth0,sit0,tun0
[2009/04/02 19:43:12] <anarcat> eth0 Lien encap:Ethernet HWaddr 00:16:3E:26:B2:B8
[2009/04/02 19:43:12] <anarcat> eth1 Lien encap:Ethernet HWaddr 00:16:3E:6C:EA:EE
[2009/04/02 19:43:13] <anarcat> eth0:hg Lien encap:Ethernet HWaddr 00:16:3E:26:B2:B8
[2009/04/02 19:43:13] <anarcat> eth0:rt Lien encap:Ethernet HWaddr 00:16:3E:26:B2:B8
[2009/04/02 19:43:21] <anarcat> it doesn't support named aliases
[2009/04/02 19:43:26] <Volcane> ah
[2009/04/02 19:43:43] <lurbs> They're supposed to be deprecated anyway, aren't they? ;)
[2009/04/02 19:43:55] * lak will just wait for the bug
[2009/04/02 19:44:02] <lak> looks like you all have it under control :)
[2009/04/02 19:44:10] <jrojas> int = output.scan(/^\w+[.:]?\d+/)
[2009/04/02 19:44:16] <anarcat> eh
[2009/04/02 19:44:26] <anarcat> yeah, that haven't changed!
[2009/04/02 19:44:46] <jrojas> that prolly doesnt get the correct output for these interfaces, wasnt there a discussion somewhere recently about the use of /sbin/ip vs /sbin/ifconfig or whateevr
[2009/04/02 19:44:51] <anarcat> lak: it's a one-line fix:
[2009/04/02 19:44:52] <anarcat> int = output.scan(/^\w+[.:]?\d+[.:]?\d*/)
[2009/04/02 19:44:57] <anarcat> that's in 1.5 master
[2009/04/02 19:45:03] <anarcat> that should be ... hum
[2009/04/02 19:45:15] <jrojas> is that for alphafy
[2009/04/02 19:45:16] <anarcat> int = output.scan(/^\w+[.:]?\d+[.:]?\d*[.:]?\w*/)
[2009/04/02 19:45:29] <anarcat> that's in def self.get_interfaces
[2009/04/02 19:45:34] <anarcat> lak: i'll file a bug
[2009/04/02 19:45:54] <jrojas> interface.gsub(/[:.]/, '_')
[2009/04/02 19:46:11] <jrojas> thats in alphafy
[2009/04/02 19:46:53] * Volcane goes
[2009/04/02 19:47:49] <jrojas> so the interface names should* show up correctly with underscores
[2009/04/02 19:48:05] <anarcat> er
[2009/04/02 19:48:15] <anarcat> i can't open a bug
[2009/04/02 19:48:36] <jrojas> it may be a fixed bug already if it is in the 1.5 master,
[2009/04/02 19:48:36] <anarcat> jrojas: no, because they don't get detected right in get_interfaces
[2009/04/02 19:48:42] <jrojas> ah yes
[2009/04/02 19:49:08] <anarcat> it's not fixed in the master
[2009/04/02 19:49:18] <anarcat> oh, i can open a bug
[2009/04/02 19:50:13] @ Quit: chiggsy:
[2009/04/02 19:50:29] <jrojas> last commit was lak, i blame him.
[2009/04/02 19:50:35] @ Quit: benblack: "Leaving..."
[2009/04/02 19:50:55] <anarcat> i also blame lak, but that's too easy :P
[2009/04/02 19:51:03] <anarcat> i blame facter
[2009/04/02 19:51:07] <anarcat> and hacim, while i'm here
[2009/04/02 19:51:17] <anarcat> i blame the universe for constantly needing to be fixed
[2009/04/02 19:51:18] <anarcat> there
[2009/04/02 19:51:45] <jrojas> but computer stuff wouldnt need to be fixed if we were made "perfectly"
[2009/04/02 19:52:08] <jrojas> so i too, blame lak and his universe.
[2009/04/02 19:53:22] <anarcat> generating a patch
[2009/04/02 19:53:35] <jrojas> now that I think about it, I havent blamed perl for much recently...
[2009/04/02 19:53:46] <anarcat> well, that's just the background noise
[2009/04/02 19:53:52] <anarcat> you can't keep on blaming perl constantly
[2009/04/02 19:53:55] <anarcat> you'd go crazy
[2009/04/02 19:53:56] <anarcat> like
[2009/04/02 19:53:59] <anarcat> i can blame ruby
[2009/04/02 19:54:03] <anarcat> but i can't blame php
[2009/04/02 19:54:07] @ Quit: madrescher: "Leaving."
[2009/04/02 19:54:15] <anarcat> it's bad, it's not its fault, it was created this way
[2009/04/02 19:54:34] <jrojas> i still write a bunch of perl to "maintain" legacy code in certain places where it should just be replaced by a rock
[2009/04/02 19:55:07] <jrojas> but people dont believe me that a regular old rock will handle more requests than mod_perl running on apache 1
[2009/04/02 19:56:29] @ Quit: fux: Read error: 60 (Operation timed out)
[2009/04/02 19:56:33] @ fux joined channel #puppet
[2009/04/02 19:58:03] @ Quit: WALoeIII:
[2009/04/02 19:58:33] <anarcat> lak: http://projects.reductivelabs.com/issues/2132
[2009/04/02 19:58:49] <anarcat> jrojas: haha
[2009/04/02 19:58:54] <anarcat> jrojas: i don't believe you either :P
[2009/04/02 19:59:43] <anarcat> so!
[2009/04/02 19:59:48] <anarcat> at last, i can reload my catalog :)
[2009/04/02 20:02:21] @ Quit: alfism: "Connection reset by beer"
[2009/04/02 20:07:04] @ Quit: lak: Read error: 110 (Connection timed out)
[2009/04/02 20:11:07] @ lak joined channel #puppet
[2009/04/02 20:14:35] @ Quit: elijahwright: Read error: 54 (Connection reset by peer)
[2009/04/02 20:15:42] @ d3vilb0x joined channel #puppet
[2009/04/02 20:17:38] @ Quit: \ask-_: Read error: 110 (Connection timed out)
[2009/04/02 20:18:18] @ andrewcshafer joined channel #puppet
[2009/04/02 20:19:27] @ shake-n-bake joined channel #puppet
[2009/04/02 20:20:13] <PaulWay> Volcane: something odd - that define there doesn't seem to actually be dragging in the package I want.
[2009/04/02 20:20:33] <anarcat> lak: i filed a bug report, in case you missed it: http://projects.reductivelabs.com/issues/2132 (patch included)
[2009/04/02 20:21:50] <lak> cool
[2009/04/02 20:22:37] <anarcat> :)
[2009/04/02 20:22:53] <anarcat> the patch is stupidly trivial, and you should especially look at the last line of the bug report
[2009/04/02 20:23:08] <anarcat> because interface aliases are not real interfaces, so maybe they shouldn't be reported...
[2009/04/02 20:23:52] <lak> i think they should be
[2009/04/02 20:25:09] <anarcat> okay
[2009/04/02 20:25:12] <anarcat> then just apply the patch :)
[2009/04/02 20:25:16] <anarcat> sorry it's for 1.5.4 :(
[2009/04/02 20:25:29] <anarcat> i can reroll with head if you want, but it's so trivial i'm not sure it's really that important
[2009/04/02 20:39:35] <PaulWay> Curse it - my use of resource defaults a-la http://reductivelabs.com/trac/puppet/wiki/LanguageTutorial#resource-defaults isn't working.
[2009/04/02 20:40:15] @ ezmob joined channel #puppet
[2009/04/02 20:40:52] <PaulWay> I have http://rafb.net/p/bnXV5N37.html and am calling it via nagios::nrpe_command("check_time": command => "check_ntp", parameters => "-H localhost", nagios_plugin => "nagios_plugins_ntp")
[2009/04/02 20:41:18] <PaulWay> oh, note: line 23 is removed.
[2009/04/02 20:41:22] <PaulWay> from the paste.
[2009/04/02 20:41:46] <PaulWay> If there's a better way to do that, let me know!
[2009/04/02 20:46:06] @ gstratton left channel #puppet ()
[2009/04/02 20:46:07] <PaulWay> When I run puppetd -tovd I can see that "...Nagios::Nrpe_command[check_time]/File[/etc/nagios/nrpe.d/check_time.cfg]/require: requires File[/etc/nagios/nrpe.d]"
[2009/04/02 20:46:34] <PaulWay> But there's no other require put on File[/etc/nagios/nrpe.d/check_time.cfg]
[2009/04/02 20:46:42] @ fujin joined channel #puppet
[2009/04/02 20:46:59] <PaulWay> (I want it to require Package["nagios-plugins-ntp"] - i.e. $nagios_plugin
[2009/04/02 20:47:06] <PaulWay> Any ideas would be really appreciated.
[2009/04/02 20:47:51] @ anarcat left channel #puppet ("thanks")
[2009/04/02 20:54:12] @ n0ts__ joined channel #puppet
[2009/04/02 20:54:41] @ Quit: lak:
[2009/04/02 20:59:44] @ Quit: ezmob: "Bye!"
[2009/04/02 21:01:23] @ markl_ joined channel #puppet
[2009/04/02 21:04:24] @ Quit: rmiller4pi8: Read error: 110 (Connection timed out)
[2009/04/02 21:04:42] @ Quit: andrewcshafer:
[2009/04/02 21:04:46] @ Quit: shake-n-bake:
[2009/04/02 21:05:48] @ Quit: fujin_: Read error: 110 (Connection timed out)
[2009/04/02 21:06:49] @ nakano is now known as nakano_
[2009/04/02 21:07:10] @ nakano_ is now known as nakano
[2009/04/02 21:07:28] @ nakano is now known as nakano_
[2009/04/02 21:08:11] @ Quit: n0ts_: Read error: 110 (Connection timed out)
[2009/04/02 21:09:54] @ Flam5 joined channel #puppet
[2009/04/02 21:10:15] @ Quit: fujin:
[2009/04/02 21:10:28] @ shake-n-bake joined channel #puppet
[2009/04/02 21:13:09] <jrojas> testing this damn puppetshow thing is going to be a pain in the ass
[2009/04/02 21:13:17] @ fujin joined channel #puppet
[2009/04/02 21:13:42] <PaulWay> heh
[2009/04/02 21:15:43] @ Quit: keithlard:
[2009/04/02 21:16:43] @ Quit: shake-n-bake:
[2009/04/02 21:17:13] @ keithlard joined channel #puppet
[2009/04/02 21:17:15] @ rmiller4pi8 joined channel #puppet
[2009/04/02 21:18:00] @ teratoma joined channel #puppet
[2009/04/02 21:24:40] @ Quit: webber:
[2009/04/02 21:30:57] <PaulWay> Well, I've got it, but only by forcing the caller to specify a nagios plugin package.
[2009/04/02 21:33:09] @ Quit: Bass10: Connection timed out
[2009/04/02 21:59:47] @ benblack joined channel #puppet
[2009/04/02 22:03:08] @ cwebber joined channel #puppet
[2009/04/02 22:07:41] @ markl__ joined channel #puppet
[2009/04/02 22:07:57] @ pizza joined channel #puppet
[2009/04/02 22:08:27] @ pizza left channel #puppet ()
[2009/04/02 22:10:18] @ Quit: cwebber:
[2009/04/02 22:13:30] @ webber joined channel #puppet
[2009/04/02 22:18:02] @ peiriannydd joined channel #puppet
[2009/04/02 22:18:09] @ Quit: keithlard:
[2009/04/02 22:31:23] @ Quit: benblack: Read error: 110 (Connection timed out)
[2009/04/02 22:37:43] @ PhabX joined channel #puppet
[2009/04/02 22:39:18] <PhabX> is trying to manage the creation of xen virtual machines asking too much of puppet? should i stick to other tools like cobbler :(
[2009/04/02 22:47:10] @ peiriannydd left channel #puppet ()
[2009/04/02 22:49:30] <rmiller4pi8> PhabX: not necessarily, what's the trouble? tho tool-for-the-job remains true, and using puppet and cobbler together can make sense
[2009/04/02 22:50:25] @ cwebber joined channel #puppet
[2009/04/02 22:52:05] @ sebykrueger joined channel #puppet
[2009/04/02 22:52:22] <PhabX> rmiller4pi8: no trouble really. just don't want to dive into something that might be a bad idea
[2009/04/02 22:52:38] <sebykrueger> does anyone know how to generate encrypted passwords to use with the user statement?
[2009/04/02 22:53:04] <sebykrueger> I've got the pass in cleartext, but don't know how to easily encrypt it for rubylib-shadow to use.
[2009/04/02 22:53:38] <rmiller4pi8> sebykrueger: i havent looked at rubylib-shadow, but shadow passwords are just md5
[2009/04/02 22:54:45] <rmiller4pi8> prepended with $1$ to indicate that it's md5 not crypt
[2009/04/02 22:55:04] <sebykrueger> not with opensuse, it's blowfish by default, unfortunately
[2009/04/02 22:55:08] <rmiller4pi8> PhabX: it's hard to say without knowing what you're doing more particularly, but Volcane and I both do it
[2009/04/02 22:55:45] <sebykrueger> does anyone here use blowfish passwords in their /etc/shadow?
[2009/04/02 22:56:04] <rmiller4pi8> sebykrueger: it may do blowfish, but you can mix and match with md5, that's why the prepended bit exists
[2009/04/02 22:56:29] <sebykrueger> right, I'll give that a go right away, thanks!
[2009/04/02 22:58:37] <sebykrueger> ha, that works!!!
[2009/04/02 22:58:44] <sebykrueger> thanks rmiller4pi8!
[2009/04/02 22:59:09] <rmiller4pi8> welcome, glad i could help
[2009/04/02 22:59:51] <sebykrueger> of course, blowfish is way more secure, so i'm still keen to use blowfish instead of md5 :P
[2009/04/02 23:00:01] <sebykrueger> but md5 will get me going for now
[2009/04/02 23:00:28] <fujin> sebykrueger: openssl passwd -1 / --help
[2009/04/02 23:00:46] <fujin> there's also a 'mkpasswd' app, kicking around.. somewhere
[2009/04/02 23:02:20] <sebykrueger> the mkpasswd thingy has been aparently deprecated and is not part of opensuse anymore, but I'm just looking at the openssl thing :) thanks
[2009/04/02 23:08:43] @ chiggsy joined channel #puppet
[2009/04/02 23:11:04] <fujin> sebykrueger: mkpasswd is part of the 'passwd' package on debian/ubuntu, not sure what opensuse are up to in that sense
[2009/04/02 23:11:35] <fujin> I believe I also pastied a puppet function at some stage that shelled out to mkpasswd so you could store plaintext versions in manifests
[2009/04/02 23:11:59] <fujin> http://pastie.org/pastes/222996
[2009/04/02 23:12:25] <fujin> again just uses mkpasswd though
[2009/04/02 23:21:31] @ mfoster left channel #puppet ()
[2009/04/02 23:24:00] @ webber left channel #puppet ()
[2009/04/02 23:32:15] @ RexMundi joined channel #puppet
[2009/04/02 23:32:38] @ Quit: RexMundi_: Read error: 104 (Connection reset by peer)
[2009/04/02 23:33:54] @ rmiller4pi81 joined channel #puppet
[2009/04/02 23:39:43] @ lak joined channel #puppet
[2009/04/02 23:47:07] @ mikepea joined channel #puppet
[2009/04/02 23:52:15] @ Quit: rmiller4pi8: Read error: 110 (Connection timed out)
[2009/04/02 23:52:58] @ Quit: ethan_rowe: "Lack of interest wins out."

Generated by irclog2html.py 2.6 by Marius Gedminas - find it at mg.pov.lt!